SICK AG Sentio Creator Extension 'Device Manager' vulnerabilities

An attacker may achieve arbitrary code execution on a target system by uploading a malicious device driver package, bypassing driver verification mechanisms, and triggering the execution of attacker-controlled code. User interaction is required.