CVE-2026-2330

Critical

Description

An attacker may access restricted filesystem areas on the device via the CROWN REST interface due to incomplete whitelist enforcement. Certain directories intended for internal testing were not covered by the whitelist and are accessible without authentication. An unauthenticated attacker could place a manipulated parameter file that becomes active after a reboot, allowing modification of critical device settings, including network configuration and application parameters.

SeverityCritical

CVSS9.4

Exploit probability—

ProductSICK Lector85x

PublishedMar 6, 2026

First seenMar 6, 2026

Weakness typeCWE-552CWE-552

How to fix

Update

SICK AG SICK Lector85x2.8.0 or later
SICK AG SICK Lector83x2.8.0 or later

Vendor advisories

sick.com/.well-known/csaf/white/2026/sca-2026-0006.pdf

Affected products

Product	Affected versions	Fixed in
SICK AG SICK Lector85x	v < 2.8.0	2.8.0
SICK AG SICK Lector83x	v < 2.8.0	2.8.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.