Description (CNA)
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SICK AG / Baggage Analytics | affected 0 before 4.6.3 |
| SICK AG / Tire Analytics | affected 0 before 4.6.3 |
| SICK AG / Package Analytics | affected 0 before 4.6.3 |
| SICK AG / Logistic Diagnostic Analytics | affected 0 before 4.6.3 |
CWE
CWE-200
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf
ADP enrichment
No English description supplied.
No references supplied.