CVE-2026-22911

Description

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials and gain unauthorized access to the device.

Affected Platforms

Weakness Type

CWE-798, CWE-522

References

• https://sick.com/psirt
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guid…