CVE-2022-27583

Critical

Description

A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact.

SeverityCritical
CVSS9.1
Exploit probability—
ProductSick Flx3-cpuc1 Firmware
PublishedOct 31, 2022
First seenOct 31, 2022
Weakness typeCWE-285CWE-285

How to fix

Update
  • sick flx3-cpuc1_firmware1.10.0 or later
  • sick flx3-cpuc2_firmware1.10.0 or later

Affected products

ProductAffected versionsFixed in
sick flx3-cpuc1_firmwarev < 1.10.01.10.0
sick flx3-cpuc2_firmwarev < 1.10.01.10.0

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.