CVE-2023-5288: A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also...
9.8
CVSS
Description
A remote unauthorized attacker may connect to the SIM1012, interact with the device and
change configuration settings. The adversary may also reset the SIM and in the worst case upload a
new firmware version to the device.
Classification
CVE ID: CVE-2023-5288
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
Affected Products
Vendor: SICK AG
Product: SIM1012
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.2% (probability of being exploited)
EPSS Percentile: 58.06% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://sick.com/psirthttps://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf
https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.json