CVE-2022-27581
Medium
Description
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.
SeverityMedium
CVSS6.5
Exploit probability—
ProductSick Rfu610-10600 Firmware
PublishedDec 13, 2022
First seenDec 13, 2022
Weakness typeCWE-327CWE-327
How to fix
Update
- sick rfu610-10600_firmware2.25 or later
- sick rfu610-10601_firmware2.25 or later
- sick rfu610-10603_firmware2.25 or later
- sick rfu610-10604_firmware2.25 or later
- sick rfu610-10605_firmware2.25 or later
- sick rfu610-10607_firmware2.25 or later
- sick rfu610-10609_firmware2.25 or later
- sick rfu610-10610_firmware2.25 or later
- sick rfu610-10613_firmware2.25 or later
- sick rfu610-10614_firmware2.25 or later
- sick rfu610-10618_firmware2.25 or later
- sick rfu610-10700_firmware2.25 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sick rfu610-10600_firmware | v < 2.25 | 2.25 |
| sick rfu610-10601_firmware | v < 2.25 | 2.25 |
| sick rfu610-10603_firmware | v < 2.25 | 2.25 |
| sick rfu610-10604_firmware | v < 2.25 | 2.25 |
| sick rfu610-10605_firmware | v < 2.25 | 2.25 |
| sick rfu610-10607_firmware | v < 2.25 | 2.25 |
| sick rfu610-10609_firmware | v < 2.25 | 2.25 |
| sick rfu610-10610_firmware | v < 2.25 | 2.25 |
| sick rfu610-10613_firmware | v < 2.25 | 2.25 |
| sick rfu610-10614_firmware | v < 2.25 | 2.25 |
| sick rfu610-10618_firmware | v < 2.25 | 2.25 |
| sick rfu610-10700_firmware | v < 2.25 | 2.25 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.