Approved changes feed: RSS · Atom

cpe:2.3:a:sick:sick_eventcam_app:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSick (7f3a0778-9cb3-5791-a25c-ef23979e3fe0)
ProductSick Eventcam App (09fe1442-4e87-5e4b-acfd-7f79a97c495c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-31411 vulnerable 2026-06-08 06:04:43.077721 Details available
CRITICAL (9.8)
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.
Published: 2023-06-19T14:59:30.206Z
Updated: 2026-06-01T07:28:03.715Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-31410 vulnerable 2026-06-08 06:04:43.077215 Details available
CRITICAL (9.8)
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK EventCam App. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the EventCam App and the Client, and potentially manipulate the data being transmitted.
Published: 2023-06-19T14:57:52.413Z
Updated: 2026-06-01T07:29:45.202Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.