CVE-2023-5288

critical

Description

A remote unauthorized attacker may connect to the SIM1012, interact with the device and change configuration settings. The adversary may also reset the SIM and in the worst case upload a new firmware version to the device.

References

https://sick.com/psirt

https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.pdf

https://sick.com/.well-known/csaf/white/2023/sca-2023-0008.json

Details

Source: Mitre, NVD

Published: 2023-09-29

Updated: 2023-10-02

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H