The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
Configuration 1 (hide)
| AND |
|
History
23 Jan 2026, 18:36
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sick tdc-x401gl
Sick tdc-x401gl Firmware Sick |
|
| CPE | cpe:2.3:o:sick:tdc-x401gl_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sick:tdc-x401gl:-:*:*:*:*:*:*:* |
|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json - Vendor Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf - Vendor Advisory | |
| References | () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product |
15 Jan 2026, 13:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-01-15 13:16
Updated : 2026-01-23 18:36
NVD link : CVE-2026-22920
Mitre link : CVE-2026-22920
CVE.ORG link : CVE-2026-22920
JSON object : View
Products Affected
sick
- tdc-x401gl_firmware
- tdc-x401gl
CWE
CWE-1391
Use of Weak Credentials