Vulnerability Description
A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Sick Eventcam App | All versions |
Related Weaknesses (CWE)
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
FAQ
What is CVE-2023-31411?
CVE-2023-31411 is a vulnerability with a CVSS score of 9.8 (CRITICAL). A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to p...
How severe is CVE-2023-31411?
CVE-2023-31411 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-31411?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Sick Eventcam App.