CVE-2023-3271 in ICR890-4

Sumário

de MITRE • 10/07/2023

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsável: SICK AG
• Reservar: 15/06/2023
• Divulgação: 10/07/2023
• Moderação: aceite
• Entrada: VDB-233428
• CPE: pronto
• CWE: CWE-284 (confirmado)
• CVSS: 7.5 (NVD)
• EPSS: 0.00260
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-3271
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-3271
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-3271/