CVE-2020-2076 - SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API

Back Back to CVE browser

CRITICAL

SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API

Published Jul 29, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.26%

Description

SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, bypass current authentication controls presented by the application and could potentially write files without authentication.

Affected products

Vendor n/a Product SICK Package Analytics Default
n/a
- Version
  <=V04.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

SICK Package Analytics

n/a

Version	Status	Constraints
<=V04.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (1)

https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
x_refsource_MISCVendor Advisory

Link	Providers	Tags
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories		x_refsource_MISCVendor Advisory