CVE Feed

    Dashboard / CVE / CVE-2024-10025

    CVE-2024-10025

    A vulnerability in the .sdd file allows an attacker to read default passwords stored in plain text within the code. By exploiting these plaintext credentials, an attacker can log into affected SICK products as an “Authorized Client” if the customer has not changed the default password.

    Published:Oct 17, 2024
    Last Modified:Apr 15, 2026
    EPS:Oct 17, 2024
    EPSS Score:0.00094
    CVSS Score:9.1

    Affected Products

    Vendor
    Sick
    Product
    Clv620 Firmware
    Vendor
    Sick
    Product
    Clv621 Firmware
    Vendor
    Sick
    Product
    Clv622 Firmware
    Vendor
    Sick
    Product
    Clv630 Firmware
    Vendor
    Sick
    Product
    Clv631 Firmware
    Vendor
    Sick
    Product
    Clv632 Firmware
    Vendor
    Sick
    Product
    Clv640 Firmware
    Vendor
    Sick
    Product
    Clv642 Firmware
    Vendor
    Sick
    Product
    Clv650 Firmware
    Vendor
    Sick
    Product
    Clv651 Firmware
    Vendor
    Sick
    Product
    Lector610 Firmware
    Vendor
    Sick
    Product
    Lector611 Firmware
    Vendor
    Sick
    Product
    Lector620 Firmware
    Vendor
    Sick
    Product
    Lector621 Firmware
    Vendor
    Sick
    Product
    Lector622 Firmware
    Vendor
    Sick
    Product
    Lector630 Firmware
    Vendor
    Sick
    Product
    Lector632 Firmware
    Vendor
    Sick
    Product
    Lector640 Firmware
    Vendor
    Sick
    Product
    Lector642 Firmware
    Vendor
    Sick
    Product
    Lector650 Firmware
    Vendor
    Sick
    Product
    Lector651 Firmware
    Vendor
    Sick
    Product
    Lector654 Firmware
    Vendor
    Sick
    Product
    Rfu610-10600 Firmware
    Vendor
    Sick
    Product
    Rfu610-10601 Firmware
    Vendor
    Sick
    Product
    Rfu610-10603 Firmware
    Vendor
    Sick
    Product
    Rfu610-10604 Firmware
    Vendor
    Sick
    Product
    Rfu610-10605 Firmware
    Vendor
    Sick
    Product
    Rfu610-10607 Firmware
    Vendor
    Sick
    Product
    Rfu610-10609 Firmware
    Vendor
    Sick
    Product
    Rfu610-10610 Firmware
    Vendor
    Sick
    Product
    Rfu610-10613 Firmware
    Vendor
    Sick
    Product
    Rfu610-10614 Firmware
    Vendor
    Sick
    Product
    Rfu610-10618 Firmware
    Vendor
    Sick
    Product
    Rfu610-10700 Firmware
    Vendor
    Sick
    Product
    Rfu620-10100 Firmware
    Vendor
    Sick
    Product
    Rfu620-10101 Firmware
    Vendor
    Sick
    Product
    Rfu620-10102 Firmware
    Vendor
    Sick
    Product
    Rfu620-10103 Firmware
    Vendor
    Sick
    Product
    Rfu620-10104 Firmware
    Vendor
    Sick
    Product
    Rfu620-10105 Firmware
    Vendor
    Sick
    Product
    Rfu620-10107 Firmware
    Vendor
    Sick
    Product
    Rfu620-10108 Firmware
    Vendor
    Sick
    Product
    Rfu620-10111 Firmware
    Vendor
    Sick
    Product
    Rfu620-10114 Firmware
    Vendor
    Sick
    Product
    Rfu620-10118 Firmware
    Vendor
    Sick
    Product
    Rfu620-10400 Firmware
    Vendor
    Sick
    Product
    Rfu620-10401 Firmware
    Vendor
    Sick
    Product
    Rfu620-10500 Firmware
    Vendor
    Sick
    Product
    Rfu620-10501 Firmware
    Vendor
    Sick
    Product
    Rfu620-10503 Firmware
    Vendor
    Sick
    Product
    Rfu620-10504 Firmware
    Vendor
    Sick
    Product
    Rfu620-10507 Firmware

    Exploits

    No exploit reference

    Common Weakness Enumeration

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High