CVE-2022-46833
Summary
| CVE | CVE-2022-46833 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-12-13 16:15:00 UTC |
| Updated | 2022-12-15 20:23:00 UTC |
| Description | Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person. |
Risk And Classification
Problem Types: CWE-327
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Sick | Rfu630-04100 | - | All | All | All |
| Hardware | Sick | Rfu630-04100s01 | - | All | All | All |
| Operating System | Sick | Rfu630-04100s01 Firmware | All | All | All | All |
| Operating System | Sick | Rfu630-04100 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04101 | - | All | All | All |
| Operating System | Sick | Rfu630-04101 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04102 | - | All | All | All |
| Operating System | Sick | Rfu630-04102 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04103 | - | All | All | All |
| Operating System | Sick | Rfu630-04103 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04104 | - | All | All | All |
| Operating System | Sick | Rfu630-04104 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04105 | - | All | All | All |
| Operating System | Sick | Rfu630-04105 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04106 | - | All | All | All |
| Operating System | Sick | Rfu630-04106 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04109 | - | All | All | All |
| Operating System | Sick | Rfu630-04109 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-04117 | - | All | All | All |
| Operating System | Sick | Rfu630-04117 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13100s01 | - | All | All | All |
| Operating System | Sick | Rfu630-13100s01 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13101 | - | All | All | All |
| Operating System | Sick | Rfu630-13101 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13102 | - | All | All | All |
| Operating System | Sick | Rfu630-13102 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13103 | - | All | All | All |
| Operating System | Sick | Rfu630-13103 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13104 | - | All | All | All |
| Operating System | Sick | Rfu630-13104 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13105 | - | All | All | All |
| Operating System | Sick | Rfu630-13105 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13106 | - | All | All | All |
| Operating System | Sick | Rfu630-13106 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13107 | - | All | All | All |
| Operating System | Sick | Rfu630-13107 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13108 | - | All | All | All |
| Operating System | Sick | Rfu630-13108 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13110 | - | All | All | All |
| Operating System | Sick | Rfu630-13110 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13111 | - | All | All | All |
| Operating System | Sick | Rfu630-13111 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13113 | - | All | All | All |
| Operating System | Sick | Rfu630-13113 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13114 | - | All | All | All |
| Operating System | Sick | Rfu630-13114 Firmware | All | All | All | All |
| Hardware | Sick | Rfu630-13115 | - | All | All | All |
| Operating System | Sick | Rfu630-13115 Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| The SICK Product Security Incident Response Team (SICK PSIRT) | SICK | MISC | sick.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.