Vulnerability Description
SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Package Analytics | <= 04.0.0 |
Related Weaknesses (CWE)
References
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
- https://www.sick.com/de/en/service-and-support/the-sick-product-security-incidenVendor Advisory
FAQ
What is CVE-2020-2077?
CVE-2020-2077 is a vulnerability with a CVSS score of 7.5 (HIGH). SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by ...
How severe is CVE-2020-2077?
CVE-2020-2077 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-2077?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Package Analytics.