CVE-2026-11841: Unrestricted File Access in SICK InspectorP6x Series

Vulnerability Overview Vulnerability ID: CVE-2026-11841 Description: Multiple internal virtual file system paths in SICK InspectorP6x devices are unexpectedly accessible remotely. Exploitation of this vulnerability may compromise the device's availability, integrity, and confidentiality. CVSS Score: 9.4 (High) Attack Complexity: Low Attack Vector: Network Availability Impact: Low Base Score: 9.4 Base Severity: Critical Confidentiality Impact: High Confidentiality Impact Score: Critical Environmental Dependency: 9.4 Environmental Severity: Critical Integrity Impact: High Privileges Required: None Scope: Unchanged Temporal Severity: 9.4 Temporal Severity: None User Interaction: None Vector String: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L Affected Products Affected Products: - SICK InspectorP6x All Versions - SICK InspectorP62x All Versions - SICK InspectorP63x All Versions - SICK InspectorP64x All Versions - SICK InspectorP61x Firmware < 5.4.0 - SICK InspectorP61x Firmware 5.4.0 - SICK InspectorP62x Firmware < 5.4.0 - SICK InspectorP62x Firmware 5.4.0 - SICK InspectorP65x Firmware All Versions - SICK InspectorP63x Firmware All Versions - SICK InspectorP64x Firmware All Versions Remediation Remediation Status: Fixed Recommended Fixed Versions: - SICK InspectorP61x Firmware 5.4.0 - SICK InspectorP62x Firmware 5.4.0 Mitigation Measures: - Ensure that only trusted entities have access to the device. - Implement general security measures to reduce the device's exposure on the network, restrict network access, and follow recommended security practices. - Reference Resources: - SICK Operating Guidelines - ICS-CERT Recommended Practices on Industrial Security Additional Information Publication Date: 2026-07-28T12:47:00.000Z Last Update Date: 2026-06-17T12:47:21.218Z Reference Links: - SICK PSIRT Security Advisories - SICK Operating Guidelines - ICS-CERT Recommended Practices on Industrial Security - CVSS v3.1 Calculator Notes POC Code: No POC code or exploit code is included in the document.

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2026-11841: Unrestricted File Access in SICK InspectorP6x Series