CVE-2020-2077: High severity sick package analytics vulnerability
Published Jul 29, 2020
·Updated
SICK Package Analytics software up to and including version V04.0.0 are vulnerable due to incorrect default permissions settings. An unauthorized attacker could read sensitive data from the system by querying for known files using the REST API directly.
Affected Software
1 affected component
SICK Package Analytics<=04.0.0
Event History
Jul 29, 2020
CVE Published
via MITRE·01:18 PM
Data Sourced
via MITRE·01:18 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-2077?
CVE-2020-2077 has a medium severity rating due to its potential for unauthorized data access.
2
Who is affected by CVE-2020-2077?
CVE-2020-2077 affects all versions of SICK Package Analytics up to and including version V04.0.0.
3
How do I fix CVE-2020-2077?
To fix CVE-2020-2077, update SICK Package Analytics to a version later than V04.0.0.
4
What kind of data is at risk due to CVE-2020-2077?
CVE-2020-2077 allows unauthorized attackers to read sensitive data stored in the system.
5
Can CVE-2020-2077 be exploited remotely?
Yes, CVE-2020-2077 can be exploited remotely via the REST API by querying known files.