Security readout for executives and security teams
Plain-English summary
CVE-2023-3273 is an access-control flaw in SICK ICR890-4 devices. A remote unauthenticated attacker could change device settings, including the IP address, and disrupt availability. For businesses, the main concern is operational interruption to processes that depend on the affected reader remaining reachable and correctly configured.
Executive priority
Treat this as a high-priority OT availability issue if these devices support production, logistics, or safety-adjacent workflows. Prioritize exposure reduction and vendor guidance review over broad emergency response unless active exploitation evidence emerges.
Technical view
The source bundle describes missing access control in SICK ICR890-4, mapped to CWE-284. CVSS 3.1 is 7.5 high, network exploitable, low complexity, no privileges, no user interaction, with availability impact only. Sources do not establish confidentiality or integrity impact beyond configuration changes affecting availability.
Likely exposure
Exposure is most likely where SICK ICR890-4 devices are reachable from untrusted networks, flat internal networks, remote access paths, or poorly segmented OT environments. The bundle supports only SICK ICR890-4 as affected.
Exploitation context
The bundle does not indicate CISA KEV listing or active exploitation. It supports unauthenticated remote exploitation potential, but provides no public evidence here of exploitation in the wild or exploit availability.
Researcher notes
Evidence is limited to the CVE bundle and SICK advisory references. The affected version is represented as "0" in the bundle, so researchers should rely on SICK SCA-2023-0006 for precise product status. Do not extend impact to other SICK products without source support.
Mitigation direction
- Check SICK PSIRT and advisory SCA-2023-0006 for official fixes or compensating controls.
- Restrict network access to affected ICR890-4 devices to trusted management hosts only.
- Segment OT networks so unauthenticated users cannot reach device configuration interfaces.
- Monitor for unexpected IP address or configuration changes on affected devices.
- Back up known-good device configuration to support rapid recovery.
Validation and detection
- Inventory SICK ICR890-4 devices and record firmware or software versions.
- Confirm whether each device matches the affected product listed in the advisory.
- Review network paths to identify unauthenticated reachability from user, vendor, or remote-access networks.
- Check device configuration history for unexpected IP address or setting changes.
- Document whether SICK advisory guidance has been applied to each device.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-284: Authorization and privilege behavior lookup
Authorization weaknesses can support privilege escalation and valid-account review, depending on exploit path. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCVE-2023-3273 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H3.93.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
7.5HighVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source materials
- CVE List V5 sourceCVE List V5
- https://sick.com/psirtCVE reference · issue-tracking
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.pdfCVE reference · vendor-advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0006.jsonCVE reference · x_csaf
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Access Control
Improper Access Control represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.