Sick Eventcam App vulnerabilities

2 CVEs affecting Sick Eventcam App, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-31411, published 2023-06-19.

More from Sick.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-31411, published 2023-06-19. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to…
• CVE-2023-31410, published 2023-06-19. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK EventCam App. This lack of encryption in…