CVE Catalog
CVE-2023-35698
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.57%
43th percentile - higher than 43% of all known CVEs
Summary
The SICK ICR890-4 has an observable response discrepancy that could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt.
Risk Assessment
An attacker could exploit this vulnerability to carry out further attacks on the FTP server, potentially leading to unauthorized access to the system.
Recommendation
It is recommended to monitor FTP server logs and implement additional security measures to mitigate the risk of unauthorized access.
Original NVD description (English source)
Observable Response Discrepancy in the SICK ICR890-4 could allow a remote attacker to identify valid usernames for the FTP server from the response given during a failed login attempt.