SICK AG
First CVE: Jul 29, 2020Active for: 6 years
160
CVEs Published
More CVEs Published than 76% of tracked CNAs
22.9
Avg CVEs / Year
More Avg CVEs / Year than 71% of tracked CNAs
7.5
Avg CVSS Score
Higher Avg CVSS Score than 66% of tracked CNAs
0.0%
In CISA KEV
Bottom 1%
Self-Reporting Analysis
Of all the CVEs published by SICK AG as a CNA, 75.6% affect products that SICK AG develops as a vendor.
75.6%
24.4%
Self-reported: 121Third-party: 39
Of all the CVEs published that affect products developed by SICK AG, 98.4% are self-published by SICK AG as a CNA.
98.4%
Self-published: 121Published by other CNAs: 2
Trends Over Time
The number and severity of CVEs published by SICK AG over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jul 29, 2020
5 years ago
Most Recent CVE
Mar 6, 2026
140 days ago
Top CVEs
All CVEs published by SICK AG as a CNA, regardless of affected vendor or product.
160 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-2331CRITICAL An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critic | Mar 6, 2026 | 9.8 | 33 | NO | NO |
CVE-2026-22907CRITICAL An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data. | Jan 15, 2026 | 9.1 | 33 | NO | NO |
CVE-2026-22910CRITICAL The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unauthorized access. This represents a high risk to the | Jan 15, 2026 | 9.1 | 32 | NO | NO |
CVE-2026-22909CRITICAL Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed applications, potentially disrupting system operations | Jan 15, 2026 | 9.1 | 32 | NO | NO |
CVE-2022-27582CRITICAL Password recovery vulnerability in SICK SIM4000 (PPC) Partnumber 1078787 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by i | Nov 1, 2022 | 9.8 | 32 | NO | NO |
CVE-2026-2330CRITICAL An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal tes | Mar 6, 2026 | 9.4 | 31 | NO | NO |
CVE-2025-59461CRITICAL A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services. | Oct 27, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-58587CRITICAL The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess use | Oct 6, 2025 | 9.8 | 30 | NO | NO |
CVE-2025-0867CRITICAL The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the a | Feb 14, 2025 | 9.9 | 30 | NO | NO |
CVE-2023-23450CRITICAL Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR
FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526
allows an un | May 15, 2023 | 9.8 | 30 | NO | NO |
CVE Severity & Scoring
Severity distribution of CVEs published by this CNA160 CVEs
33%
44%
23%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local6 (3.8%)
Network151 (94.4%)
Unknown0 (0.0%)
Physical3 (1.9%)
Adjacent Network0 (0.0%)
Attack Complexity
Low154 (96.3%)
High6 (3.8%)
Unknown0 (0.0%)
User Interaction
None134 (83.8%)
Unknown0 (0.0%)
Required26 (16.3%)
Privileges Required
Low23 (14.4%)
High2 (1.3%)
None135 (84.4%)
Unknown0 (0.0%)
Exploit Exposure
Signals from CVEs in this cna scope (160 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
An overview of all social media posts that mention a CVE ID published by SICK AG as a CNA.
Media Mentions
Media articles that mention a CVE ID published by SICK AG as a CNA — matched by CVE ID, not by organization name.