The vulnerability involves improper input handling in a system endpoint, which can cause resource exhaustion. An attacker could send crafted input to overload system resources, resulting in service disruption. This is classified as a CWE‑770 weakness that compromises availability.

The affected product is the SICK AG TDC‑X401GL hardware series. The issue applies to all currently shipped firmware versions prior to the latest release. Users are advised to upgrade to firmware version 1.5.0 or later to eliminate the flaw.

The CVSS score of 4.3 indicates a moderate risk. The EPSS score of less than 1% suggests that exploitation is unlikely at this time, and the vulnerability is not listed in the CISA KEV catalog. It is inferred that attackers would need some form of network access to the vulnerable endpoint, though the exact scope (local or remote) is not specified in the description. The lack of high exploitation probability reduces urgency, but the denial‑of‑service impact could impede essential operations.