tdc-x401gl firmware · threatengine.sh

Home/Product/sick tdc x401gl firmware

Product

sick tdc x401gl firmware

13 known vulnerabilities across versions

Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.

Sort Min CVSS Published since

An attacker with administrative access may inject malicious content into the login page, potentially enabling cross-site scripting

An attacker may exploit missing protection against clickjacking by tricking users into performing unintended actions through malic

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.

An attacker with low privileges may be able to trigger critical system functions such as reboot or factory reset without proper re

An attacker with low privileges may be able to read files from specific directories on the device, potentially exposing sensitive

An attacker with limited permissions may still be able to write files to specific locations on the device, potentially leading to

Improper handling of a URL parameter may allow attackers to execute code in a user's browser after login. This can lead to the ext

Improper validation of a login parameter may allow attackers to redirect users to malicious websites after authentication. This ca

Firmware update files may expose password hashes for system accounts, which could allow a remote attacker to recover credentials a

The device is deployed with weak and publicly known default passwords for certain hidden user levels, increasing the risk of unaut

Certain system functions may be accessed without proper authorization, allowing attackers to start, stop, or delete installed appl

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data.

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin