Sick SIM1012-0p0g200 Firmware vulnerabilities

2 CVEs affecting Sick SIM1012-0p0g200 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-5288, published 2023-09-29.

More from Sick.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-43990, published 2022-11-01. High severity, CVSS 7.3. EPSS: 0.9% chance of exploitation in the next 30 days. Password recovery vulnerability in SICK SIM1012 Partnumber 1098146 with firmware version <2.2.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel…
• CVE-2023-5288, published 2023-09-29. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM and in the worst case upload a new…