{"id":"CVE-2023-5288","aliases":["EUVD-2023-57612","GHSA-g4x9-h5v7-39wj"],"status":"published","title":"A remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange...","description":"A remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange configuration settings. The adversary may also reset the SIM and in the worst case upload a\nnew firmware version to the device.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.008,"percentile":0.5702,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-284"],"published":"2023-09-29T11:37:56Z","modified":"2026-06-17T06:48:16Z","products":[{"vendor":"sick","product":"sim1012"},{"vendor":"sick","product":"sim1012-0p0g200_firmware"},{"vendor":"sick ag","product":"sim1012"}],"references":[{"url":"https://sick.com/psirt","tags":["issue-tracking","x_transferred","Vendor Advisory"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf","tags":["vendor-advisory","x_transferred","Mitigation","Vendor Advisory"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.json","tags":["x_csaf","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5288"},{"url":"https://github.com/advisories/GHSA-g4x9-h5v7-39wj"}],"sources":{"cve":[{"id":"CVE-2023-5288","description":"\nA remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange configuration settings. The adversary may also reset the SIM and in the worst case upload a\nnew firmware version to the device.\n\n","status":"published","published":"2023-09-29T11:37:56.571Z","modified":"2024-12-09T14:08:49.408Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:16.771348Z"}],"euvd":[{"id":"EUVD-2023-57612","description":"\nA remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange configuration settings. The adversary may also reset the SIM and in the worst case upload a\nnew firmware version to the device.\n\n","status":"published","published":"2023-09-29T11:37:56Z","modified":"2024-12-09T14:08:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:04:38.257628Z"}],"ghsa":[{"id":"GHSA-g4x9-h5v7-39wj","title":"\nA remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange...","description":"\nA remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange configuration settings. The adversary may also reset the SIM and in the worst case upload a\nnew firmware version to the device.\n\n","status":"published","published":"2023-09-29T12:30:16Z","modified":"2024-04-04T07:58:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:56:56.52202Z"}],"nvd":[{"id":"CVE-2023-5288","description":"\nA remote unauthorized attacker may connect to the SIM1012, interact with the device and\nchange configuration settings. The adversary may also reset the SIM and in the worst case upload a\nnew firmware version to the device.\n\n","status":"published","published":"2023-09-29T12:15:13.437Z","modified":"2026-06-17T06:48:16.073Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:08:35.022405Z"}]}}