NetSight
medium6.5

CVE-2022-46833

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data …

Impact

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Affected products

VendorProductAffected versions
SickRfu630-04100 Firmware
before 2.21
SickRfu630-04100s01 Firmware
before 2.21
SickRfu630-04101 Firmware
before 2.21
SickRfu630-04102 Firmware
before 2.21
SickRfu630-04103 Firmware
before 2.21
SickRfu630-04104 Firmware
before 2.21
SickRfu630-04105 Firmware
before 2.21
SickRfu630-04106 Firmware
before 2.21
SickRfu630-04109 Firmware
before 2.21
SickRfu630-04117 Firmware
before 2.21
SickRfu630-13100s01 Firmware
before 2.21
SickRfu630-13101 Firmware
before 2.21

Weakness classification

References