SICK Incoming Goods Suite Component Disclosure Vulnerability

A vulnerability exists in the SICK Incoming Goods Suite that allows the application to disclose all used components, versions, and license information to unauthenticated users. This exposure gives attackers the opportunity to target known security vulnerabilities in the disclosed components. The issue affects all versions of the SICK Incoming Goods Suite and its firmware, except for version 1.2.1.

Impact

Exploitation of this vulnerability could lead to unauthorized targeting of known security vulnerabilities in the disclosed components, potentially allowing attackers to exploit those vulnerabilities.

Remediation

Users are strongly recommended to upgrade to the latest release of SICK Incoming Goods Suite (version 1.2.1 or higher).