CVE-2022-27581

Published: Dec 13, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Affected (12)

Products: Sick: Rfu610 10600 Firmware, Rfu610 10601 Firmware, Rfu610 10603 Firmware, Rfu610 10604 Firmware, Rfu610 10605 Firmware, Rfu610 10607 Firmware, Rfu610 10609 Firmware, Rfu610 10610 Firmware, Rfu610 10613 Firmware, Rfu610 10614 Firmware, Rfu610 10618 Firmware, Rfu610 10700 Firmware

Sick

12 products

Rfu610 10600 Firmware

Rfu610 10601 Firmware

Rfu610 10603 Firmware

Rfu610 10604 Firmware

Rfu610 10605 Firmware

Rfu610 10607 Firmware

Rfu610 10609 Firmware

Rfu610 10610 Firmware

Rfu610 10613 Firmware

Rfu610 10614 Firmware

Rfu610 10618 Firmware

Rfu610 10700 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10600 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10600	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10601 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10601	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10603 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10603	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10604 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10604	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10605 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10605	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10607 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10607	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10609 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10609	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10610 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10610	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10613 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10613	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10614 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10614	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10618 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10618	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu610 10700 Firmware	Before 2.25

Running on/with	Platform Versions
Sick Rfu610 10700	All versions

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.