CVE-2023-31410

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK EventCam App. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the EventCam App and the Client, and potentially manipulate the data being transmitted.

• CWE-319

• https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.jsonVendor Advisory
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.pdfVendor Advisory
• https://sick.com/psirtVendor Advisory
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.jsonVendor Advisory
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0005.pdfVendor Advisory
• https://sick.com/psirtVendor Advisory

Published

Jun 19, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-31405SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERC…5.3
• CVE-2023-31406Due to insufficient input validation, SAP BusinessObjects Bu…6.1
• CVE-2023-31407SAP Business Planning and Consolidation - versions 740, 750,…5.4
• CVE-2023-31408Cleartext Storage of Sensitive Information in SICK FTMg AIR …7.5
• CVE-2023-31409Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENS…7.5
• CVE-2023-3141A use-after-free flaw was found in r592_remove in drivers/me…7.1
• CVE-2023-31411A remote unprivileged attacker can modify and access configu…9.8
• CVE-2023-31412The LMS5xx uses weak hash generation methods, resulting in t…7.5
• CVE-2023-31413Filebeat versions through 7.17.9 and 8.6.2 have a flaw in ht…3.3
• CVE-2023-31414Kibana versions 8.0.0 through 8.7.0 contain an arbitrary cod…8.8
• CVE-2023-31415Kibana version 8.7.0 contains an arbitrary code execution fl…8.8
• CVE-2023-31416Secret token configuration is never applied when using ECK <…5.3