Sick
Sick Tdc-x401gl Firmware: vulnerabilidades y CVE
Sick Tdc-x401gl Firmware tiene 13 vulnerabilidades publicadas, 13 de ellas en los últimos 12 meses. 4 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE13
Últimos 12 meses13
Críticas4
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-22919 | Media (4.8) | 0.30% | — | 15 ene 2026 | An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting (XSS) attacks, leading to the extraction of sensitive data. |
| CVE-2026-22918 | Alta (8.2) | 0.32% | — | 15 ene 2026 | An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through maliciously crafted web pages, leading to the extraction of sensitive data. |
| CVE-2026-22917 | Alta (7.5) | 0.56% | — | 15 ene 2026 | Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service. |
| CVE-2026-22916 | Media (5.4) | 0.37% | — | 15 ene 2026 | An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration. |
| CVE-2026-22915 | Media (6.5) | 0.41% | — | 15 ene 2026 | An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive information. |
| CVE-2026-22914 | Media (6.5) | 0.31% | — | 15 ene 2026 | An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation. |
| CVE-2026-22913 | Media (6.1) | 0.39% | — | 15 ene 2026 | Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the extraction of sensitive data. |
| CVE-2026-22912 | Media (6.1) | 0.37% | — | 15 ene 2026 | Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This can lead to various risk including stealing credentials from unsuspecting users. |
| CVE-2026-22911 | Alta (7.5) | 0.53% | — | 15 ene 2026 | Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device. |
| CVE-2026-22910 | Crítica (9.1) | 0.48% | — | 15 ene 2026 | The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the integrity of the system. |
| CVE-2026-22909 | Crítica (9.1) | 0.56% | — | 15 ene 2026 | Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations. |
| CVE-2026-22908 | Crítica (9.1) | 0.60% | — | 15 ene 2026 | Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality. |
| CVE-2026-22907 | Crítica (9.1) | 0.45% | — | 15 ene 2026 | An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. |
🎯 Cómo se explota (técnicas ATT&CK)
Número de CVE de esta tecnología asignadas a cada técnica de explotación o de impacto principal.