CVE-2026-22907

An attacker with low-level privileges, acting remotely over the network, can gain unauthorized access to the host file system of the device. The vulnerability does not require user interaction or complex attack conditions (low complexity level). The scope of the attack extends beyond the context of the vulnerable component (S:C), indicating the possibility of impact on resources outside the original execution environment.

An attacker can read and modify system data on the host, which may lead to a breach of confidentiality, integrity, and availability of the system. In industrial environments, this can result in disruption of device operation or escalation of attacks on further infrastructure.

Patches available from the manufacturer should be applied in accordance with the references (https://sick.com/psirt and document SCA-2026-0001). It is also recommended to apply ICS guidelines published by CISA regarding best practices for industrial system security.

SICK TDC-X401GL devices and their firmware — specific versions indicated in manufacturer references (SCA-2026-0001).