CVE-2022-46832
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface.
Does this matter?
Lower severity and a low EPSS score (0.31%). Track it; it rarely justifies an emergency change on its own.
Description
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.31% probability · 24th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-327
- Affected
- sick/rfu620-10100 firmware · sick/rfu620-10101 firmware · sick/rfu620-10102 firmware · sick/rfu620-10103 firmware · sick/rfu620-10104 firmware · sick/rfu620-10105 firmware · sick/rfu620-10107 firmware · sick/rfu620-10108 firmware · sick/rfu620-10111 firmware · sick/rfu620-10114 firmware · sick/rfu620-10118 firmware · sick/rfu620-10400 firmware · sick/rfu620-10401 firmware · sick/rfu620-10500 firmware · sick/rfu620-10501 firmware · sick/rfu620-10503 firmware · sick/rfu620-10504 firmware · sick/rfu620-10507 firmware · sick/rfu620-10508 firmware · sick/rfu620-10510 firmware · +1 more
- Source
- psirt@sick.de
References
- https://sick.com/psirtVendor Advisory
- https://sick.com/psirtVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.