Vulnerability Description
SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, bypass current authentication controls presented by the application and could potentially write files without authentication.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Package Analytics | <= 04.0.0 |
Related Weaknesses (CWE)
References
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
FAQ
What is CVE-2020-2076?
CVE-2020-2076 is a vulnerability with a CVSS score of 9.8 (CRITICAL). SICK Package Analytics software up to and including version V04.0.0 are vulnerable to an authentication bypass by directly interfacing with the REST API. An attacker can send unauthorized requests, by...
How severe is CVE-2020-2076?
CVE-2020-2076 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2020-2076?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Package Analytics.