CVE-2022-46833

Published: Dec 13, 2022Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Affected (24)

Sick

24 products

Rfu630 04100 Firmware

Rfu630 04100s01 Firmware

Rfu630 04101 Firmware

Rfu630 04102 Firmware

Rfu630 04103 Firmware

Rfu630 04104 Firmware

Rfu630 04105 Firmware

Rfu630 04106 Firmware

Rfu630 04109 Firmware

Rfu630 04117 Firmware

Rfu630 13100s01 Firmware

Rfu630 13101 Firmware

Rfu630 13102 Firmware

Rfu630 13103 Firmware

Rfu630 13104 Firmware

Rfu630 13105 Firmware

Rfu630 13106 Firmware

Rfu630 13107 Firmware

Rfu630 13108 Firmware

Rfu630 13110 Firmware

Rfu630 13111 Firmware

Rfu630 13113 Firmware

Rfu630 13114 Firmware

Rfu630 13115 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04100 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04100	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04100s01 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04100s01	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04101 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04101	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04102 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04102	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04103 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04103	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04104 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04104	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04105 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04105	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04106 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04106	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04109 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04109	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 04117 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 04117	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13100s01 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13100s01	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13101 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13101	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13102 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13102	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13103 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13103	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13104 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13104	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13105 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13105	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13106 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13106	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13107 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13107	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13108 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13108	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13110 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13110	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13111 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13111	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13113 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13113	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13114 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13114	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Rfu630 13115 Firmware	Before 2.21

Running on/with	Platform Versions
Sick Rfu630 13115	All versions

Related CWEs

CWE-327

Use of a Broken or Risky Cryptographic Algorithm

The product uses a broken or risky cryptographic algorithm or protocol.

References (2)

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.