CVE-2023-3273: Sick ICR890-4 Firmware

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the IP address based on missing access control.

Affected products

• Sick ICR890-4 Firmware: before 2.5.0 (fixed in 2.5.0)

Published 2023-07-10. Last modified 2026-06-17.