Sick AG Sick_Safetyscanners_Base CPP Driver Out-Of-Bounds Read Exposed to Unauthenticated Network Attackers

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-101290

Key Details

CVE	CVE-2026-101290
CVSS Score / Version	7.5 (High) / CVSS v3.1
Updated	2026-10-15
CVSS Vector	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H`
CVSS Prose	attack vector is network; attack complexity is low; privileges required is none; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is none; availability impact is high.
Affected products	Sick AG Sick_Safetyscanners_Base CPP Driver
Classified as	CWE-125 (Out-of-bounds Read)
Exploitation prediction (EPSS)	0.45% probability of exploitation in the next 30 days (38% percentile) -- FIRST.org's EPSS model.

Vendor	Product	Affected Versions	Patch Status
Sick AG	Sick_Safetyscanners_Base CPP Driver

Vendor

Product

Affected Versions

Patch Status

Sick AG

Sick_Safetyscanners_Base CPP Driver

Subsystems	General OT
Sectors	Multiple

A remote attacker may send a specially crafted network packet that causes the

affected application to perform an out-of-bounds memory read due to insufficient validation of

packet length. This may result in an application crash and a denial-of-service condition. (NVD)

Monitor Sick AG's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-101290
CVE	https://www.cve.org/CVERecord?id=CVE-2026-101290

Source

Reference

NVD

CVE