The vulnerability allows an attacker who already has limited permissions on a SICK TDC‑X401GL device to write files to specific locations, which could be used to alter system behavior or compromise device integrity. This can lead to unauthorized configuration changes, persistence mechanisms, or further privilege escalation. The weakness is identified as CWE‑266, indicating insufficient privilege checks for file write operations.

SICK AG TDC‑X401GL devices, specifically the versions listed in the CNA entry. The vulnerability was reported for the device’s firmware and hardware platform, but no specific firmware version numbers are provided in the available data.

The CVSS base score of 4.3 reflects a moderate risk, and the EPSS score of less than 1% indicates a very low probability of exploitation in the wild. The vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The likely attack path requires the attacker to first obtain some level of access to the device – for example, a legitimate user account or a compromised service – and then exploit the insufficient privilege checks to write to protected locations.