PT-2026-2996 · Sick Ag+1 · Tdc-X401Gl+1

Published 2026-01-15 · Updated 2026-01-23 · CVE-2026-22915

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to 2026-22915

Description An attacker with limited access rights could potentially read files from designated directories on a device, which may lead to the disclosure of confidential data. Approximately zero devices are estimated to be affected worldwide. The issue allows unauthorized information disclosure on the target device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-497

Related Identifiers

CVE-2026-22915

Affected Products

Tdc-X401Gl

Tdc-X401Gl Firmware

References · 10

• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22915 · Security Note
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf · Vendor Advisory
• https://twitter.com/CVEnew/status/2012490373226967084 · Twitter Post
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cveNotify/149681 · Telegram Post
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://twitter.com/VulmonFeeds/status/2011807859328061502 · Twitter Post
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note