CVE Catalog
CVE-2023-35699
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk0.18%
7th percentile - higher than 7% of all known CVEs
Summary
CVE-2023-35699 concerns cleartext storage on disk in the SICK ICR890-4 device. This allows an unauthenticated attacker with local access to the device to disclose sensitive information by accessing the SD card.
Risk Assessment
The risk to the organization involves the potential disclosure of confidential data, which may lead to privacy breaches and information security issues.
Recommendation
It is recommended to secure data on the SD card through encryption and to restrict access to the device to authorized users only.
Original NVD description (English source)
Cleartext Storage on Disk in the SICK ICR890-4 could allow an unauthenticated attacker with local access to the device to disclose sensitive information by accessing a SD card.