CVE Feed

    Dashboard / CVE / CVE-2022-46834

    CVE-2022-46834

    Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

    Published:Dec 13, 2022
    Last Modified:Apr 22, 2025
    EPS:Dec 13, 2022
    EPSS Score:0.00092
    CVSS Score:6.5

    Affected Products

    Vendor
    Sick
    Product
    Rfu650-10100
    Vendor
    Sick
    Product
    Rfu650-10100 Firmware
    Vendor
    Sick
    Product
    Rfu650-10101
    Vendor
    Sick
    Product
    Rfu650-10101 Firmware
    Vendor
    Sick
    Product
    Rfu650-10102
    Vendor
    Sick
    Product
    Rfu650-10102 Firmware
    Vendor
    Sick
    Product
    Rfu650-10103
    Vendor
    Sick
    Product
    Rfu650-10103 Firmware
    Vendor
    Sick
    Product
    Rfu650-10104
    Vendor
    Sick
    Product
    Rfu650-10104 Firmware
    Vendor
    Sick
    Product
    Rfu650-10105
    Vendor
    Sick
    Product
    Rfu650-10105 Firmware
    Vendor
    Sick
    Product
    Rfu650-10106
    Vendor
    Sick
    Product
    Rfu650-10106 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High