CVE-2023-5288

CRITICAL

SICK SIM1012-0P0G200 Firmware - Unauthenticated Configuration Modification and Firmware Upload

Title source: llm
STIX 2.1

Description

A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM and in the worst case upload a new firmware version to the device.

References (3)

Core 3
Core References
Vendor Advisory issue-tracking
https://sick.com/psirt
Mitigation, Vendor Advisory vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf

Scores

CVSS v3 9.8
EPSS 0.0065
EPSS Percentile 46.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-284
Status published
Products (1)
sick/sim1012-0p0g200_firmware
Published Sep 29, 2023
Tracked Since Feb 18, 2026