CVE-2023-31411 CRITICAL

CVE-2023-31411

Vendor Sick Ag
Product EventCam App
Published June 19, 2023
Last update June 1, 2026

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

A remote unprivileged attacker can modify and access configuration settings on the EventCam App due to the absence of API authentication. The lack of authentication in the API allows the attacker to potentially compromise the functionality of the EventCam App.

Key dates

02Disclosure timeline

June 19, 2023 CVE published
June 1, 2026 Record updated