PT-2022-18503 · Sick · Sick Rfu61X

Published 2022-12-13 · Updated 2022-12-15 · CVE-2022-27581

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SICK RFU61x firmware versions prior to v2.25

Description The issue is related to the use of a broken or risky cryptographic algorithm, allowing a low-privileged remote attacker to decrypt encrypted data if weak cipher suites are used for encryption via the SSH interface.

Recommendations For SICK RFU61x firmware versions prior to v2.25, update the firmware to version v2.25 or later by following the patch and installation procedure available from the responsible SICK customer contact person.

Fix

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-327

Related Identifiers

CVE-2022-27581

Affected Products

Sick Rfu61X

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-27581 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27581 · Vendor Advisory
• https://sick.com/psirt · Vendor Advisory