CVE-2022-46832
Summary
| CVE | CVE-2022-46832 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-12-13 16:15:00 UTC |
| Updated | 2022-12-15 20:13:00 UTC |
| Description | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person. |
Risk And Classification
Problem Types: CWE-327
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sick | Rfu620-10100 | - | All | All | All |
| Operating System | Sick | Rfu620-10100 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10101 | - | All | All | All |
| Operating System | Sick | Rfu620-10101 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10102 | - | All | All | All |
| Operating System | Sick | Rfu620-10102 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10103 | - | All | All | All |
| Operating System | Sick | Rfu620-10103 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10104 | - | All | All | All |
| Operating System | Sick | Rfu620-10104 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10105 | - | All | All | All |
| Operating System | Sick | Rfu620-10105 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10107 | - | All | All | All |
| Operating System | Sick | Rfu620-10107 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10108 | - | All | All | All |
| Operating System | Sick | Rfu620-10108 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10111 | - | All | All | All |
| Operating System | Sick | Rfu620-10111 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10114 | - | All | All | All |
| Operating System | Sick | Rfu620-10114 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10118 | - | All | All | All |
| Operating System | Sick | Rfu620-10118 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10400 | - | All | All | All |
| Operating System | Sick | Rfu620-10400 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10401 | - | All | All | All |
| Operating System | Sick | Rfu620-10401 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10500 | - | All | All | All |
| Operating System | Sick | Rfu620-10500 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10501 | - | All | All | All |
| Operating System | Sick | Rfu620-10501 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10503 | - | All | All | All |
| Operating System | Sick | Rfu620-10503 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10504 | - | All | All | All |
| Operating System | Sick | Rfu620-10504 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10507 | - | All | All | All |
| Operating System | Sick | Rfu620-10507 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10508 | - | All | All | All |
| Operating System | Sick | Rfu620-10508 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10510 | - | All | All | All |
| Operating System | Sick | Rfu620-10510 Firmware | All | All | All | All |
| Hardware | Sick | Rfu620-10514 | - | All | All | All |
| Operating System | Sick | Rfu620-10514 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| The SICK Product Security Incident Response Team (SICK PSIRT) | SICK | MISC | sick.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.