CVE Feed

    Dashboard / CVE / CVE-2022-27581

    CVE-2022-27581

    Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

    Published:Dec 13, 2022
    Last Modified:Apr 22, 2025
    EPS:Dec 13, 2022
    EPSS Score:0.00108
    CVSS Score:6.5

    Affected Products

    Vendor
    Sick
    Product
    Rfu610-10600
    Vendor
    Sick
    Product
    Rfu610-10600 Firmware
    Vendor
    Sick
    Product
    Rfu610-10601
    Vendor
    Sick
    Product
    Rfu610-10601 Firmware
    Vendor
    Sick
    Product
    Rfu610-10603
    Vendor
    Sick
    Product
    Rfu610-10603 Firmware
    Vendor
    Sick
    Product
    Rfu610-10604
    Vendor
    Sick
    Product
    Rfu610-10604 Firmware
    Vendor
    Sick
    Product
    Rfu610-10605
    Vendor
    Sick
    Product
    Rfu610-10605 Firmware
    Vendor
    Sick
    Product
    Rfu610-10607
    Vendor
    Sick
    Product
    Rfu610-10607 Firmware
    Vendor
    Sick
    Product
    Rfu610-10609
    Vendor
    Sick
    Product
    Rfu610-10609 Firmware
    Vendor
    Sick
    Product
    Rfu610-10610
    Vendor
    Sick
    Product
    Rfu610-10610 Firmware
    Vendor
    Sick
    Product
    Rfu610-10613
    Vendor
    Sick
    Product
    Rfu610-10613 Firmware
    Vendor
    Sick
    Product
    Rfu610-10614
    Vendor
    Sick
    Product
    Rfu610-10614 Firmware
    Vendor
    Sick
    Product
    Rfu610-10618
    Vendor
    Sick
    Product
    Rfu610-10618 Firmware
    Vendor
    Sick
    Product
    Rfu610-10700
    Vendor
    Sick
    Product
    Rfu610-10700 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High