Sick vulnerabilities

Products

• Package Analytics 16
• Baggage Analytics 13
• Logistic Diagnostic Analytics 13
• Tdc-x401gl Firmware 13
• Tire Analytics 13
• Field Analytics 12
• Enterprise Analytics 10
• Media Server 10
• Apu0200 Firmware 9
• Ftmg-esd15axx Firmware 8
• Ftmg-esd20axx Firmware 8
• Ftmg-esd25axx Firmware 8
• Ftmg-esn40sxx Firmware 8
• Ftmg-esn50sxx Firmware 8
• Ftmg-esr40sxx Firmware 8
• Ftmg-esr50sxx Firmware 8
• Icr890-4 Firmware 8
• Fx0-gent00000 Firmware 5
• Fx0-gpnt00000 Firmware 5
• Inspector61x Firmware 5
• Inspector62x Firmware 5
• Lms500 Firmware 5
• Lms511 Firmware 5
• Lms531 Firmware 5
• Tloc100-100 Firmware 5
• Apu0200 4
• Lms5xx 4
• Msc800 Firmware 4
• Fx0-gent00010 Firmware 3
• Fx0-gent00030 Firmware 3
• Fx0-gmod00000 Firmware 3
• Fx0-gmod00010 Firmware 3
• Fx0-gpnt00010 Firmware 3
• Fx0-gpnt00030 Firmware 3
• Incoming Goods Suite 3
• Sopas Engineering Tool 3
• Ftmg Firmware 2
• Lms1000 Firmware 2
• Mrs1000 Firmware 2
• Msc800 2

Show 10 moreShow less

• Rfu620-10507 Firmware 2
• Eventcam App 2
• Sim1000 Fx Firmware 2
• Sim1012-0p0g200 Firmware 2
• Sim2000 Firmware 2
• Sim2000st Firmware 2
• Tim3xx 2
• Ue410-en1 Firmware 2
• Ue410-en3 Firmware 2
• Ue410-en4 Firmware 2

Newest

• sick lms1000 firmware, mrs1000 firmware, sick ag lms1000 +1 more +3 more An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service... CVE-2026-1627 6.5 MediumFebruary 27, 2026
• sick lms1000 firmware, mrs1000 firmware, sick ag lms1000 +1 more +3 more An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to... CVE-2026-1626 6.5 MediumFebruary 27, 2026
• sick incoming goods suite Certain error messages returned by the application expose internal system details that should not... CVE-2026-22646 4.3 MediumJanuary 15, 2026
• sick incoming goods suite The application discloses all used components, versions and license information to... CVE-2026-22645 5.3 MediumJanuary 15, 2026
• sick incoming goods suite Certain requests pass the authentication token in the URL as string query parameter, making it... CVE-2026-22644 5.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker with administrative access may inject malicious content into the login page,... CVE-2026-22919 3.8 LowJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker may exploit missing protection against clickjacking by tricking users into performing... CVE-2026-22918 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Improper input handling in a system endpoint may allow attackers to overload resources, causing a... CVE-2026-22917 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker with low privileges may be able to trigger critical system functions such as reboot... CVE-2026-22916 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker with low privileges may be able to read files from specific directories on the device... CVE-2026-22915 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker with limited permissions may still be able to write files to specific locations on... CVE-2026-22914 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Improper handling of a URL parameter may allow attackers to execute code in a user's browser... CVE-2026-22913 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Improper validation of a login parameter may allow attackers to redirect users to malicious... CVE-2026-22912 4.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Firmware update files may expose password hashes for system accounts, which could allow a remote... CVE-2026-22911 5.3 MediumJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more The device is deployed with weak and publicly known default passwords for certain hidden user... CVE-2026-22910 7.5 HighJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Certain system functions may be accessed without proper authorization, allowing attackers to... CVE-2026-22909 7.5 HighJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more Uploading unvalidated container images may allow remote attackers to gain full access to the... CVE-2026-22908 9.1 CriticalJanuary 15, 2026
• sick tdc-x401gl firmware, sick ag tdc-x401gl +1 more An attacker may gain unauthorized access to the host filesystem, potentially allowing them to... CVE-2026-22907 9.9 CriticalJanuary 15, 2026
• sick tloc100-100 firmware, sick ag tloc100-100 all firmware versions +1 more Denial-of-service (DoS) via chunk size mismatch CVE-2025-59463 4.3 MediumOctober 27, 2025
• sick tloc100-100 firmware, sick ag tloc100-100 all firmware versions +1 more Denial-of-service (DoS) via delayed or missing client response CVE-2025-59462 6.5 MediumOctober 27, 2025
• sick tloc100-100 firmware, sick ag tloc100-100 all firmware versions +1 more API does not require authentication CVE-2025-59461 7.6 HighOctober 27, 2025
• sick tloc100-100 firmware, sick ag tloc100-100 with firmware <7.1.1, tloc100-100 with firmware >=7.1.1 +2 more Unsecure access configuration CVE-2025-59460 7.5 HighOctober 27, 2025
• sick tloc100-100 firmware, sick ag tloc100-100 +1 more Denial-of-service (DoS) via resource consumption CVE-2025-59459 5.5 MediumOctober 27, 2025
• sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 more Username Disclosure Through Missing Authentication CVE-2025-58579 5.3 MediumOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more Path Traversal CVE-2025-58591 6.5 MediumOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more Path traversal CVE-2025-58590 6.5 MediumOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more Information Disclosure Through Stacktrace CVE-2025-58589 2.7 LowOctober 6, 2025
• sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 more Improper Restriction of Excessive Authentication Attempts CVE-2025-58587 6.5 MediumOctober 6, 2025
• sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 more User Enumeration by excessive error output CVE-2025-58586 5.3 MediumOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more Sensitive Information Disclosure Through Missing Authentication CVE-2025-58585 5.3 MediumOctober 6, 2025
• sick baggage analytics, enterprise analytics, logistic diagnostic analytics +2 more +4 more Plain Text Transmission of Username and Password in the URL CVE-2025-58584 5.3 MediumOctober 6, 2025
• sick enterprise analytics User Enumeration CVE-2025-58583 5.3 MediumOctober 6, 2025
• sick enterprise analytics Uncontrolled Resource Consumption via log file CVE-2025-58582 5.3 MediumOctober 6, 2025
• sick enterprise analytics Information Disclosure Through Stacktrace-/MQTT/Config/changeAll CVE-2025-58581 4.3 MediumOctober 6, 2025
• sick enterprise analytics Injection via log file CVE-2025-58580 6.5 MediumOctober 6, 2025
• sick enterprise analytics Unlimited user creation by authorized users CVE-2025-58578 3.8 LowOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more The credentials of the users stored in the system's local database can be used for the log in,... CVE-2025-9914 4.3 MediumOctober 6, 2025
• sick baggage analytics, logistic diagnostic analytics, package analytics +1 more +3 more Cross Site Scripting: Session Hijacking CVE-2025-9913 4.5 MediumOctober 6, 2025
• sick field analytics Unencrypted backup contains sensitive information CVE-2025-49200 6.5 MediumJune 12, 2025
• sick field analytics Backup files can be modified and uploaded CVE-2025-49199 8.8 HighJune 12, 2025
• sick media server Poor quality of randomness in authorization tokens CVE-2025-49198 3.1 LowJune 12, 2025
• sick media server Deprecated TLS version supported CVE-2025-49197 6.5 MediumJune 12, 2025
• sick field analytics Deprecated TLS version supported CVE-2025-49196 6.5 MediumJune 12, 2025
• sick media server No protection against brute-force attacks CVE-2025-49195 5.3 MediumJune 12, 2025
• sick media server Unencrypted communication CVE-2025-49194 7.5 HighJune 12, 2025
• plex media server, sick baggage analytics, field analytics +3 more +5 more Missing HTTP Security Headers CVE-2025-49193 4.2 MediumJune 12, 2025
• sick field analytics, media server +1 more Clickjacking CVE-2025-49192 4.3 MediumJune 12, 2025
• sick field analytics Dashboards and iFrames can link malicious web content CVE-2025-49191 4.8 MediumJune 12, 2025
• sick field analytics Server-Side Request Forgery CVE-2025-49190 4.3 MediumJune 12, 2025
• sick media server Cookie missing HttpOnly flag CVE-2025-49189 5.3 MediumJune 12, 2025
• Show olderLoading…