TROYANOSYVIRUS
← Back to CVEs

CVE-2026-22907

CRITICAL
9.9

Description

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

CVE Details

CVSS v3.1 Score9.9
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredLOW
User InteractionNONE
Published1/15/2026
Last Modified1/23/2026
Sourcenvd
Honeypot Sightings0

Affected Products

sick:tdc-x401glsick:tdc-x401gl_firmware

Weaknesses (CWE)

CWE-266

References

https://sick.com/psirt(psirt@sick.de)
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices(psirt@sick.de)
https://www.first.org/cvss/calculator/3.1(psirt@sick.de)
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json(psirt@sick.de)
https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf(psirt@sick.de)
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf(psirt@sick.de)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.