Sick Safetyscanners Base Cpp Driver
Monthly
An out-of-bounds memory read in the SICK Safetyscanners Base C++ driver (CVE-2026-101290) lets a remote attacker crash the affected application by sending a specially crafted packet whose declared length is not properly validated during parsing. The flaw carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), meaning it is reachable over the network without authentication or user interaction, but the impact is strictly availability - the driver reads past the end of a buffer and the process terminates, producing a denial-of-service condition with no confidentiality or integrity effect and no code execution. No public exploit code has been identified at time of analysis and there is no CISA KEV listing; real-world exposure is bounded by network reachability, since an attacker must be able to deliver malformed scanner-protocol traffic to the interface or port the driver parses, which in typical OT deployments requires presence on or routing into the industrial/scanner network segment. SICK AG published advisory SCA-2026-0015 covering the affected driver.
An out-of-bounds memory read in the SICK Safetyscanners Base C++ driver (CVE-2026-101290) lets a remote attacker crash the affected application by sending a specially crafted packet whose declared length is not properly validated during parsing. The flaw carries a CVSS 3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), meaning it is reachable over the network without authentication or user interaction, but the impact is strictly availability - the driver reads past the end of a buffer and the process terminates, producing a denial-of-service condition with no confidentiality or integrity effect and no code execution. No public exploit code has been identified at time of analysis and there is no CISA KEV listing; real-world exposure is bounded by network reachability, since an attacker must be able to deliver malformed scanner-protocol traffic to the interface or port the driver parses, which in typical OT deployments requires presence on or routing into the industrial/scanner network segment. SICK AG published advisory SCA-2026-0015 covering the affected driver.