Approved changes feed: RSS · Atom

cpe:2.3:a:sick_ag:inspectorp64x:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSick Ag (af882a65-bf06-5e2e-bd49-09a5774cabaf)
ProductInspectorp64X (774ed825-c8fe-5fcc-bfe4-307d9cb0771f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-11841 vulnerable 2026-09-16 04:32:46.479870 CVE-2026-11841
CRITICAL (9.4)
An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment.
Published: 2026-07-28T09:25:36.738Z
Updated: 2026-08-24T13:54:22.224Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.