Multiple services of the DUT as well as different scopes of the same service reuse the same credentials.
Weakness
The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Meac300-fnade4_firmware | Endress | * | 0.16.0 (including) |
Potential Mitigations
References
- https://sick.com/psirt
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.endress.com
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf