CVE-2023-3272

Summary

CVE-2023-3272 is a vulnerability affecting the SICK ICR890-4 industrial control and automation system. This issue arises from theclear transmission of sensitive information over the network without encryption. A remote attacker can exploit this vulnerability by intercepting unencrypted network traffic, gaining unauthorized access to sensitive data. This could potentially lead to significant security risks and potential data breaches. It is strongly recommended that users of the SICK ICR890-4 system upgrade to a version that supports encrypted communication to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.