CVE-2019-10979 - SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password

CRITICAL

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password

Published Jul 1, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 3.38%

SICK MSC800 all versions prior to Version 4.0, the affected firmware versions contain a hard-coded customer account password.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
all versions prior to Version 4.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-798

Hard-coded Credentials

Link	Providers	Tags
http://www.securityfocus.com/bid/108924		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories		x_refsource_CONFIRM
https://www.us-cert.gov/ics/advisories/icsa-19-178-04		x_refsource_MISCThird Party AdvisoryUS Government Resource