What’s Vulnerable › Vulnerabilities

CVE-2026-2330: CVE-2026-2330

• Severity: critical (CVSS 9.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-06 · updated 2026-06-17
• Weakness: CWE-552

Description

An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could place a manipulated parameter file that becomes active after a reboot, allowing modification of critical device settings, including network configuration and application parameters.

Affected products

• SICK AG SICK Lector83x: before 2.8.0 — fixed in 2.8.0
• SICK AG SICK Lector85x: before 2.8.0 — fixed in 2.8.0

How to fix

Upgrade to a fixed version: SICK AG SICK Lector83x 2.8.0; SICK AG SICK Lector85x 2.8.0. Check the vendor advisory for mitigations.

References

• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.json
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
• https://www.sick.com/psirt

Get alerted when CVE-2026-2330 or the next vulnerability affects your stack