CVE-2022-27581
Summary
| CVE | CVE-2022-27581 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-12-13 16:15:00 UTC |
| Updated | 2022-12-15 17:44:00 UTC |
| Description | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person. |
Risk And Classification
Problem Types: CWE-327
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sick | Rfu610-10600 | - | All | All | All |
| Operating System | Sick | Rfu610-10600 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10601 | - | All | All | All |
| Operating System | Sick | Rfu610-10601 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10603 | - | All | All | All |
| Operating System | Sick | Rfu610-10603 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10604 | - | All | All | All |
| Operating System | Sick | Rfu610-10604 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10605 | - | All | All | All |
| Operating System | Sick | Rfu610-10605 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10607 | - | All | All | All |
| Operating System | Sick | Rfu610-10607 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10609 | - | All | All | All |
| Operating System | Sick | Rfu610-10609 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10610 | - | All | All | All |
| Operating System | Sick | Rfu610-10610 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10613 | - | All | All | All |
| Operating System | Sick | Rfu610-10613 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10614 | - | All | All | All |
| Operating System | Sick | Rfu610-10614 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10618 | - | All | All | All |
| Operating System | Sick | Rfu610-10618 Firmware | All | All | All | All |
| Hardware | Sick | Rfu610-10700 | - | All | All | All |
| Operating System | Sick | Rfu610-10700 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| The SICK Product Security Incident Response Team (SICK PSIRT) | SICK | MISC | sick.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.