{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-03T21:50:57.018","vulnerabilities":[{"cve":{"id":"CVE-2025-27595","sourceIdentifier":"psirt@sick.de","published":"2025-03-14T13:15:40.763","lastModified":"2026-06-17T09:03:53.043","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"The device uses a weak hashing alghorithm to create the password hash. Hence, a matching password can be easily calculated by an attacker. This impacts the security and the integrity of the device."},{"lang":"es","value":"El dispositivo utiliza un algoritmo hash débil para crear el hash de la contraseña. Por lo tanto, un atacante puede calcular fácilmente una contraseña coincidente. Esto afecta la seguridad y la integridad del dispositivo."}],"affected":[{"source":"psirt@sick.de","affectedData":[{"vendor":"SICK AG","product":"SICK DL100-2xxxxxxx","defaultStatus":"affected","versions":[{"version":"all versions","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"psirt@sick.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","baseScore":9.8,"baseSeverity":"CRITICAL","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":5.9}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-03-14T13:29:41.689368Z","id":"CVE-2025-27595","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"psirt@sick.de","type":"Secondary","description":[{"lang":"en","value":"CWE-328"}]}],"references":[{"url":"https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF","source":"psirt@sick.de"},{"url":"https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html","source":"psirt@sick.de"},{"url":"https://sick.com/psirt","source":"psirt@sick.de"},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","source":"psirt@sick.de"},{"url":"https://www.first.org/cvss/calculator/3.1","source":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.json","source":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.pdf","source":"psirt@sick.de"}]}}]}