{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-15T15:18:50.373413800Z","vulnerabilities":[{"cve":{"id":"CVE-2023-3271","sourceIdentifier":"psirt@sick.de","published":"2023-07-10T16:15:55.443","lastModified":"2024-11-21T08:16:52.337","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"\nImproper Access Control in the SICK ICR890-4 could allow an unauthenticated remote attacker to gather information about the system and download data via the REST API by accessing\nunauthenticated endpoints.\n\n"}],"metrics":{"cvssMetricV31":[{"source":"psirt@sick.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L","baseScore":8.2,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":4.2},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}]},"weaknesses":[{"source":"psirt@sick.de","type":"Secondary","description":[{"lang":"en","value":"CWE-284"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"NVD-CWE-noinfo"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:sick:icr890-4_firmware:*:*:*:*:*:*:*:*","versionEndExcluding":"2.5.0","matchCriteriaId":"C9781FA2-2446-4587-8BBA-1AC342BC5A0F"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:sick:icr890-4:-:*:*:*:*:*:*:*","matchCriteriaId":"8E1AF1D7-8380-4B5C-8258-214F00638CC2"}]}]}],"references":[{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json","source":"psirt@sick.de","tags":["Vendor Advisory"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf","source":"psirt@sick.de","tags":["Vendor Advisory"]},{"url":"https://sick.com/psirt","source":"psirt@sick.de","tags":["Product"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.json","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdf","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://sick.com/psirt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Product"]}]}}]}