Approved changes feed: RSS · Atom

cpe:2.3:a:sick_ag:sick_dl100-2xxxxxxx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSick Ag (af882a65-bf06-5e2e-bd49-09a5774cabaf)
ProductSick Dl100 2Xxxxxxx (b6c80cc1-b6c7-5c07-9144-700f46b66da4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-27595 vulnerable 2026-06-08 07:14:55.348524 Weak hashing alghrythm
CRITICAL (9.8)
The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device.
Published: 2025-03-14T12:53:13.682Z
Updated: 2025-03-14T13:35:00.490Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27594 vulnerable 2026-06-08 07:14:55.348196 Unencrypted transmission of password hash
HIGH (7.5)
The device uses an unencrypted, proprietary protocol for communication. Through this protocol, configuration data is transmitted and device authentication is performed. An attacker can thereby intercept the authentication hash and use it to log into the device using a pass-the-hash attack.
Published: 2025-03-14T12:50:15.198Z
Updated: 2025-03-14T13:35:28.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-27593 vulnerable 2026-06-08 07:14:55.347796 RCE due to Device Driver
CRITICAL (9.3)
The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.
Published: 2025-03-14T12:46:58.946Z
Updated: 2025-03-14T13:36:49.059Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.