CVE-2026-22916 — MEDIUM (4.3)

Vulnerability Description

An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of configuration.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

NONE

Integrity

NONE

Availability

LOW

Affected Products

Vendor	Product	Versions
Sick	Tdc-X401Gl Firmware	All versions
Sick	Tdc-X401Gl	-

Related Weaknesses (CWE)

CWE-266

References

https://sick.com/psirtVendor Advisory
https://www.cisa.gov/resources-tools/resources/ics-recommended-practicesUS Government Resource
https://www.first.org/cvss/calculator/3.1Not Applicable
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.jsonVendor Advisory
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdfVendor Advisory
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidProduct

FAQ

What is CVE-2026-22916?

CVE-2026-22916 is a vulnerability with a CVSS score of 4.3 (MEDIUM). An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper restrictions, potentially leading to service disruption or loss of confi...

How severe is CVE-2026-22916?

CVE-2026-22916 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2026-22916?

Check the references section above for vendor advisories and patch information. Affected products include: Sick Tdc-X401Gl Firmware, Sick Tdc-X401Gl.