A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.
oryginał ENCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HSick Eventcam App
APPSickwszystkie wersje
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Powiązane podatności
CVE-2023-31410CRITICAL9.8ten sam produkt
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence ...
CVE-2026-22907CRITICAL9.9PL ✓ten sam vendor
Nieautoryzowany dostęp do systemu plików hosta w SICK TDC-X401GL
CVE-2026-22908CRITICAL9.1PL ✓ten sam vendor
Brak walidacji obrazów kontenerów w SICK TDC-X401GL — pełny dostęp do systemu
CVE-2023-5288CRITICAL9.8ten sam vendor
A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration ...
CVE-2023-4420CRITICAL9.8ten sam vendor
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence ...