The application discloses all used components, versions and license information to unauthenticated actors, giving attackers the opportunity to target known security vulnerabilities of used components.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0002.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
History
No history.
Information
Published : 2026-01-15 14:16
Updated : 2026-01-29 17:19
NVD link : CVE-2026-22645
Mitre link : CVE-2026-22645
CVE.ORG link : CVE-2026-22645
JSON object : View
Products Affected
sick
- incoming_goods_suite
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor