PT-2026-3001 · Sick Ag+1 · Tdc-X401Gl+1

Published 2026-01-15 · Updated 2026-01-17 · CVE-2026-22920

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined. (affected versions not specified)

Description The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2026-22920

Affected Products

Tdc-X401Gl

Tdc-X401Gl Firmware

References · 8

• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-22920 · Security Note
• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf · Vendor Advisory
• https://first.org/cvss/calculator/3.1 · Note
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://twitter.com/CVEnew/status/2012490368206438552 · Twitter Post