Design/Logic Flaw

2023-07-1016:15:00

PRIOn knowledge base

www.prio-n.com

cleartext storage

vulnerability

sick icr890-4

disclosure

local access

sd card

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.

CPENameOperatorVersion
icr890-4_firmwarelt2.5.0

CPE	Name	Operator	Version
	icr890-4_firmware	lt	2.5.0

References

sick.com/.well-known/csaf/white/2023/sca-2023-0006.json

sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf

sick.com/psirt