{"id":"CVE-2024-10025","aliases":["EUVD-2024-32875","GHSA-m3p3-rf2c-fxw8"],"status":"published","title":"Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx","description":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00753,"percentile":0.55495,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-798"],"published":"2024-10-17T09:58:03Z","modified":"2026-06-17T06:54:47Z","products":[{"vendor":"sick","product":"rfu620-10507_firmware"},{"vendor":"sick ag","product":"sick clv6xx"},{"vendor":"sick ag","product":"sick lector6xx"},{"vendor":"sick ag","product":"sick rfx6xx"}],"references":[{"url":"https://sick.com/psirt","tags":["x_SICK PSIRT Webseite"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT recommended practices on Industrial Security"]},{"url":"https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF","tags":["x_SICK Operating Guidelines"]},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator"]},{"url":"https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.pdf","tags":["vendor-advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2024/sca-2024-0003.json","tags":["vendor-advisory","x_csaf"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-10025"},{"url":"https://github.com/advisories/GHSA-m3p3-rf2c-fxw8"}],"sources":{"cve":[{"id":"CVE-2024-10025","title":"Vulnerability in SICK CLV6xx, SICK Lector6xx and SICK RFx6xx","description":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.","status":"published","published":"2024-10-17T09:58:03.111Z","modified":"2024-10-17T16:33:53.645Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:34:02.652467Z"}],"euvd":[{"id":"EUVD-2024-32875","description":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.","status":"published","published":"2024-10-17T09:58:03Z","modified":"2024-10-17T16:33:53Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"updated_at":"2026-11-03T00:27:33.799805Z"}],"ghsa":[{"id":"GHSA-m3p3-rf2c-fxw8","title":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain...","description":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.","status":"published","published":"2024-10-17T12:30:51Z","modified":"2024-10-17T12:31:09Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:58:31.969274Z"}],"nvd":[{"id":"CVE-2024-10025","description":"A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.","status":"published","published":"2024-10-17T10:15:03.127Z","modified":"2026-06-17T06:54:47.497Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-798"],"updated_at":"2026-11-02T14:10:32.45889Z"}]}}