CVE-2024-10025
A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.
Published:Oct 17, 2024
Last Modified:Apr 15, 2026
EPS:Oct 17, 2024
EPSS Score:0.00094
CVSS Score:9.1
Affected Products
Vendor
Product
Action
Vendor
Sick
Product
Clv620 Firmware
Sick
Clv620 Firmware
Vendor
Sick
Product
Clv621 Firmware
Sick
Clv621 Firmware
Vendor
Sick
Product
Clv622 Firmware
Sick
Clv622 Firmware
Vendor
Sick
Product
Clv630 Firmware
Sick
Clv630 Firmware
Vendor
Sick
Product
Clv631 Firmware
Sick
Clv631 Firmware
Vendor
Sick
Product
Clv632 Firmware
Sick
Clv632 Firmware
Vendor
Sick
Product
Clv640 Firmware
Sick
Clv640 Firmware
Vendor
Sick
Product
Clv642 Firmware
Sick
Clv642 Firmware
Vendor
Sick
Product
Clv650 Firmware
Sick
Clv650 Firmware
Vendor
Sick
Product
Clv651 Firmware
Sick
Clv651 Firmware
Vendor
Sick
Product
Lector610 Firmware
Sick
Lector610 Firmware
Vendor
Sick
Product
Lector611 Firmware
Sick
Lector611 Firmware
Vendor
Sick
Product
Lector620 Firmware
Sick
Lector620 Firmware
Vendor
Sick
Product
Lector621 Firmware
Sick
Lector621 Firmware
Vendor
Sick
Product
Lector622 Firmware
Sick
Lector622 Firmware
Vendor
Sick
Product
Lector630 Firmware
Sick
Lector630 Firmware
Vendor
Sick
Product
Lector632 Firmware
Sick
Lector632 Firmware
Vendor
Sick
Product
Lector640 Firmware
Sick
Lector640 Firmware
Vendor
Sick
Product
Lector642 Firmware
Sick
Lector642 Firmware
Vendor
Sick
Product
Lector650 Firmware
Sick
Lector650 Firmware
Vendor
Sick
Product
Lector651 Firmware
Sick
Lector651 Firmware
Vendor
Sick
Product
Lector654 Firmware
Sick
Lector654 Firmware
Vendor
Sick
Product
Rfu610-10600 Firmware
Sick
Rfu610-10600 Firmware
Vendor
Sick
Product
Rfu610-10601 Firmware
Sick
Rfu610-10601 Firmware
Vendor
Sick
Product
Rfu610-10603 Firmware
Sick
Rfu610-10603 Firmware
Vendor
Sick
Product
Rfu610-10604 Firmware
Sick
Rfu610-10604 Firmware
Vendor
Sick
Product
Rfu610-10605 Firmware
Sick
Rfu610-10605 Firmware
Vendor
Sick
Product
Rfu610-10607 Firmware
Sick
Rfu610-10607 Firmware
Vendor
Sick
Product
Rfu610-10609 Firmware
Sick
Rfu610-10609 Firmware
Vendor
Sick
Product
Rfu610-10610 Firmware
Sick
Rfu610-10610 Firmware
Vendor
Sick
Product
Rfu610-10613 Firmware
Sick
Rfu610-10613 Firmware
Vendor
Sick
Product
Rfu610-10614 Firmware
Sick
Rfu610-10614 Firmware
Vendor
Sick
Product
Rfu610-10618 Firmware
Sick
Rfu610-10618 Firmware
Vendor
Sick
Product
Rfu610-10700 Firmware
Sick
Rfu610-10700 Firmware
Vendor
Sick
Product
Rfu620-10100 Firmware
Sick
Rfu620-10100 Firmware
Vendor
Sick
Product
Rfu620-10101 Firmware
Sick
Rfu620-10101 Firmware
Vendor
Sick
Product
Rfu620-10102 Firmware
Sick
Rfu620-10102 Firmware
Vendor
Sick
Product
Rfu620-10103 Firmware
Sick
Rfu620-10103 Firmware
Vendor
Sick
Product
Rfu620-10104 Firmware
Sick
Rfu620-10104 Firmware
Vendor
Sick
Product
Rfu620-10105 Firmware
Sick
Rfu620-10105 Firmware
Vendor
Sick
Product
Rfu620-10107 Firmware
Sick
Rfu620-10107 Firmware
Vendor
Sick
Product
Rfu620-10108 Firmware
Sick
Rfu620-10108 Firmware
Vendor
Sick
Product
Rfu620-10111 Firmware
Sick
Rfu620-10111 Firmware
Vendor
Sick
Product
Rfu620-10114 Firmware
Sick
Rfu620-10114 Firmware
Vendor
Sick
Product
Rfu620-10118 Firmware
Sick
Rfu620-10118 Firmware
Vendor
Sick
Product
Rfu620-10400 Firmware
Sick
Rfu620-10400 Firmware
Vendor
Sick
Product
Rfu620-10401 Firmware
Sick
Rfu620-10401 Firmware
Vendor
Sick
Product
Rfu620-10500 Firmware
Sick
Rfu620-10500 Firmware
Vendor
Sick
Product
Rfu620-10501 Firmware
Sick
Rfu620-10501 Firmware
Vendor
Sick
Product
Rfu620-10503 Firmware
Sick
Rfu620-10503 Firmware
Vendor
Sick
Product
Rfu620-10504 Firmware
Sick
Rfu620-10504 Firmware
Vendor
Sick
Product
Rfu620-10507 Firmware
Sick
Rfu620-10507 Firmware
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
