CVE-2022-27585

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Password recovery vulnerability in SICK SIM1000 FX Partnumber 1097816 and 1097817 with firmware version <1.6.0 allows an unprivileged remote attacker to gain access to the userlevel defined as RecoverableUserLevel by invocating the password recovery mechanism method. This leads to an increase in their privileges on the system and thereby affecting the confidentiality integrity and availability of the system. An attacker can expect repeatable success by exploiting the vulnerability. The recommended solution is to update the firmware to a version >= 1.6.0 as soon as possible (available in SICK Support Portal).

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Nov 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275869.8Password recovery vulnerability in SICK SIM1004 Partnumber 1098148 with firmware version <2.0.0 allows an unprivileged remote attacker to gaCVE-2022-275889.8We have already fixed this vulnerability in the following versions of QVR: QVR 5.1.6 build 20220401 and laterCVE-2022-27598.6Delta Electronics Delta Robot Automation Studio (DRAS) versions prior to 1.13.20 are affected by improper restrictions where the software prCVE-2022-275926.7An unquoted search path or element vulnerability has been reported to affect QVR Smart Client. If exploited, the vulnerability could allow lCVE-2022-275939.1An externally controlled reference to a resource vulnerability has been reported to affect QNAP NAS running Photo Station. If exploited, ThiCVE-2022-275957.8An insecure library loading vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local CVE-2022-275969.8A vulnerability has been reported to affect QNAP device running QuTS hero, QTS. If exploited, this vulnerability allows remote attackers to CVE-2022-275972.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275982.7A vulnerability has been reported to affect QNAP operating systems. If exploited, the out-of-bounds read vulnerability allows remote authentCVE-2022-275994.4An insertion of sensitive information into Log file vulnerability has been reported to affect product. If exploited, the vulnerability possiCVE-2022-27604.3In affected versions of Octopus Deploy it is possible to reveal the Space ID of spaces that the user does not have access to view in an erroCVE-2022-276007.5An uncontrolled resource consumption vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vul
CVE-2022-27585: Critical severity, CVSS 9.8 | Vulnix