CVE-2026-2331

{"id": "CVE-2026-2331", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-2331", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-03-09T20:55:24.319999Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@sick.de", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "psirt@sick.de", "affectedData": [{"vendor": "SICK AG", "product": "SICK Lector85x", "versions": [{"status": "affected", "version": "2.6.0", "versionType": "custom", "lessThanOrEqual": "2.7.0"}], "defaultStatus": "affected"}, {"vendor": "SICK AG", "product": "SICK Lector83x", "versions": [{"status": "affected", "version": "2.6.0", "versionType": "custom", "lessThanOrEqual": "2.7.0"}], "defaultStatus": "affected"}]}], "published": "2026-03-06T08:16:27.450", "references": [{"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", "source": "psirt@sick.de"}, {"url": "https://www.first.org/cvss/calculator/3.1", "source": "psirt@sick.de"}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.json", "source": "psirt@sick.de"}, {"url": "https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf", "source": "psirt@sick.de"}, {"url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf", "source": "psirt@sick.de"}, {"url": "https://www.sick.com/psirt", "source": "psirt@sick.de"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "psirt@sick.de", "description": [{"lang": "en", "value": "CWE-552"}]}], "descriptions": [{"lang": "en", "value": "An attacker may perform unauthenticated read and write operations on sensitive filesystem areas via the AppEngine Fileaccess over HTTP due to improper access restrictions. A critical filesystem directory was unintentionally exposed through the HTTP-based file access feature, allowing access without authentication. This includes device parameter files, enabling an attacker to read and modify application settings, including customer-defined passwords. Additionally, exposure of the custom application directory may allow execution of arbitrary Lua code within the sandboxed AppEngine environment."}, {"lang": "es", "value": "Un atacante puede realizar operaciones de lectura y escritura no autenticadas en \u00e1reas sensibles del sistema de archivos a trav\u00e9s del acceso a archivos de AppEngine sobre HTTP debido a restricciones de acceso inadecuadas. Un directorio cr\u00edtico del sistema de archivos fue expuesto involuntariamente a trav\u00e9s de la funci\u00f3n de acceso a archivos basada en HTTP, permitiendo el acceso sin autenticaci\u00f3n. Esto incluye archivos de par\u00e1metros del dispositivo, permitiendo a un atacante leer y modificar la configuraci\u00f3n de la aplicaci\u00f3n, incluyendo contrase\u00f1as definidas por el cliente. Adem\u00e1s, la exposici\u00f3n del directorio de la aplicaci\u00f3n personalizada puede permitir la ejecuci\u00f3n de c\u00f3digo Lua arbitrario dentro del entorno aislado de AppEngine."}], "lastModified": "2026-06-17T10:30:48.040", "sourceIdentifier": "psirt@sick.de"}