CVE-2026-22917

Medium

Published: 15 January 2026

Published

15 January 2026

Modified

23 January 2026

KEV Added

—

Patch

—

CVSS Score v3.1 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS Score 0.0006 19.9th percentile

Risk Priority 9 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2026-22917 is a medium-severity Allocation of Resources Without Limits or Throttling (CWE-770) vulnerability in Sick Tdc-X401Gl Firmware. Its CVSS base score is 4.3 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked at the 19.9th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-10 (Information Input Validation).

Deeper analysis

CVE-2026-22917 is a vulnerability involving improper input handling in a system endpoint, which may allow attackers to overload resources and cause a denial of service. Published on 2026-01-15, it has a CVSS v3.1 base score of 4.3 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) and is associated with CWE-770 (Allocation of Resources Without Limits or Throttling). The issue affects products from SICK, as indicated by advisories on their PSIRT page and related CSAF documents.

An attacker with low privileges (PR:L) can exploit this vulnerability over the network (AV:N) with low complexity (AC:L) and no user interaction required (UI:N). Successful exploitation results in low-impact availability disruption (A:L) with no confidentiality or integrity effects (C:N/I:N) and no scope change (S:U), such as partial resource exhaustion leading to degraded service on the affected endpoint.

Mitigation details are provided in SICK's advisories, including the PSIRT page at https://sick.com/psirt and CSAF documents at https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.json and https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0001.pdf. Additional ICS security practices are referenced via CISA at https://www.cisa.gov/resources-tools/resources/ics-recommended-practices, and the CVSS calculator is available at https://www.first.org/cvss/calculator/3.1.

EU & UK References

🇪🇺 ENISA EUVD: EUVD-2026-2815

Vulnerability details

Improper input handling in a system endpoint may allow attackers to overload resources, causing a denial of service.

CWE(s): CWE-770

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact

Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.

attack.mitre.org →

Why these techniques?

CVE enables resource exhaustion DoS via network-exploitable input handling flaw (CWE-770), directly mapping to application/system exploitation for endpoint availability impact.

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1