CVE-2023-35697

Summary

CVE-2023-35697 is a vulnerability affecting the SICK ICR890-4 industrial control system. This issue involves insufficient limitation of authentication attempts, making it possible for remote attackers to conduct brute-force attacks and potentially gain unauthorized access to user credentials. This vulnerability poses a significant risk to industrial systems, emphasizing the importance of implementing robust authentication controls to protect against unauthorized access. Companies using the SICK ICR890-4 are advised to update to the latest software version or apply appropriate patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.