Approved changes feed: RSS · Atom

cpe:2.3:o:sick:icr890-4_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSick (7f3a0778-9cb3-5791-a25c-ef23979e3fe0)
ProductIcr890 4 Firmware (b3d94f68-11c9-5372-a1fd-ebb5ddd9a3b9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-3273 vulnerable 2026-06-08 06:09:39.046096 Details available
HIGH (7.5)
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to affect the availability of the device by changing settings of the device such as the IP address based on missing access control.
Published: 2023-07-10T09:31:17.829Z
Updated: 2026-06-01T12:20:21.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3272 vulnerable 2026-06-08 06:09:39.045425 Details available
HIGH (7.5)
Cleartext Transmission of Sensitive Information in the SICK ICR890-4 could allow a remote attacker to gather sensitive information by intercepting network traffic that is not encrypted.
Published: 2023-07-10T09:27:46.002Z
Updated: 2026-06-01T12:18:35.427Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3271 vulnerable 2026-06-08 06:09:39.044818 Details available
HIGH (8.2)
Improper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing unauthenticated endpoints.
Published: 2023-07-10T09:26:21.041Z
Updated: 2026-06-01T12:20:55.083Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-3270 vulnerable 2026-06-08 06:09:39.043457 Details available
HIGH (8.6)
Exposure of Sensitive Information to an Unauthorized Actor in the SICK ICR890-4 could allow an unauthenticated remote attacker to retrieve sensitive information about the system.
Published: 2023-07-10T09:18:28.375Z
Updated: 2026-06-01T12:19:29.956Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35699 vulnerable 2026-06-08 06:06:27.472697 Details available
MEDIUM (5.3)
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.
Published: 2023-07-10T09:39:45.804Z
Updated: 2026-06-01T12:10:16.255Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35698 vulnerable 2026-06-08 06:06:27.472183 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35697 vulnerable 2026-06-08 06:06:27.471630 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35696 vulnerable 2026-06-08 06:06:27.470384 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.