CVE-2026-101290
Sick_Safetyscanners_Base CPP Driver: CVE-2026-101290
SICK AG Sick_Safetyscanners_Base CPP Driver
CVSS
7.5HighExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)0.45%Chance of exploitation activity in the next 30 days, higher than 38% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Description
A remote attacker may send a specially crafted network packet that causes the affected application to perform an out-of-bounds memory read due to insufficient validation of packet length. This may result in an application crash and a denial-of-service condition.
Text from CVE List
Affected versions 1
- Sick_Safetyscanners_Base CPP Driveraffected: all versions through 1.0.4CVE List
References 6
- sick.com/psirtAdvisoryvia CVE List
- sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfAdvisoryvia CVE List
- cisa.gov/resources-tools/resources/ics-recommended-practicesAdvisoryvia CVE List
- sick.com/.well-known/csaf/white/2026/sca-2026-0015.pdfAdvisoryvia CVE List
- first.org/cvss/calculator/3.1Referencevia CVE List
- sick.com/.well-known/csaf/white/2026/sca-2026-0015.jsonReferencevia CVE List