medium4.3
CVE-2026-22914
An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation.
Impact
An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to system manipulation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Tdc-X401gl Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf