CVE-2022-47377: Critical severity sick sim2000 firmware vulnerability
Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.13.4 as soon as possible (available in SICK Support Portal).
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-47377.
What is the severity of CVE-2022-47377?
The severity of CVE-2022-47377 is 9.8 (Critical).
Which software is affected by CVE-2022-47377?
The SICK SIM2000 Firmware with version up to 1.13.4 is affected by CVE-2022-47377.
What is the impact of CVE-2022-47377?
CVE-2022-47377 allows an unprivileged remote attacker to gain access to the user level defined as RecoverableUserLevel by invoking the password recovery mechanism method, leading to an increase in their privileges.
Are there any references available for CVE-2022-47377?
Yes, you can find more information about CVE-2022-47377 at the following reference: [https://sick.com/psirt](https://sick.com/psirt).