SICK DL100 Download of Code Without Integrity Check Vulnerability Allowing Remote Code Execution

A vulnerability exists in the SICK DL100-2xxxxxxx product line, all firmware versions, allowing the distribution of malicious code via SDD Device Drivers. This issue arises from the absence of download verification checks, which could lead to unauthorized code execution on the target system.

Impact

Exploitation of this vulnerability could result in unauthorized code execution on the affected system.

Remediation

SICK recommends applying general security practices when operating these products. Specific guidelines can be found in the SICK Operating Guidelines for Industrial Information Security.