SICK Lector8xx and InspectorP8xx Command Injection Vulnerability

A command injection vulnerability has been identified in the SICK Lector8xx and SICK InspectorP8xx product lines. This vulnerability allows remote attackers with low privileges to execute arbitrary shell commands on the affected devices. The issue arises from the ability to manipulate firmware files or use lower-level functions to interact with the device's command execution environment.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of shell commands on the affected device.

Remediation

Users are advised to upgrade to the latest versions of the Lector8xx (version 2.4.0 or later) and the InspectorP8xx (version 3.11.1 or later) that include patches for this vulnerability. It is also recommended to set a secure password, following the operating instructions available in the reference section.