SICK TDC-X401GL Vulnerability Exposing Password Hashes in Firmware Update Files

A vulnerability exists in the SICK TDC-X401GL product, where firmware update files may inadvertently reveal password hashes for system accounts. This exposure could enable remote attackers to recover credentials and gain unauthorized access to the device. The vulnerability affects all firmware versions of the SICK TDC-X401GL.

Impact

Exploitation of this vulnerability could lead to unauthorized access to the device, allowing attackers to manipulate system data or functions.

Remediation

It is recommended to ensure that only trusted entities have access to the device. Additionally, users should follow the SICK Operating Guidelines and the ICS-CERT recommended practices on Industrial Security to mitigate the associated security risks.