CVE-2022-46832
First published: Tue Dec 13 2022(Updated: )
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU62x firmware version < 2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.
Credit: psirt@sick.de psirt@sick.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10100 Firmware | ||
| All of | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10101 Firmware | ||
| All of | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10102 Firmware | ||
| All of | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10103 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10104 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10105 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10108 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10118 Firmware | ||
| All of | ||
| Sick RFU620 | <2.21 | |
| Sick Rfu620-10400 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10500 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10501 Firmware | ||
| All of | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10503 Firmware | ||
| All of | ||
| Sick RFU620-10504 | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10507 Firmware | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| All of | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10510 Firmware | ||
| All of | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10514 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10100 Firmware | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10101 Firmware | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10102 Firmware | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10103 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10104 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10105 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10108 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10118 Firmware | ||
| Sick RFU620 | <2.21 | |
| Sick Rfu620-10400 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10500 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick Rfu620-10501 Firmware | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10503 Firmware | ||
| Sick RFU620-10504 | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 | <2.21 | |
| Sick RFU620-10507 Firmware | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620 | ||
| Sick RFU620 Firmware | <2.21 | |
| Sick RFU620-10510 Firmware | ||
| Sick Rfu620 Firmware | <2.21 | |
| Sick Rfu620-10514 Firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-46832?
CVE-2022-46832 is a vulnerability in the SICK RFU62x firmware version < 2.21 that allows a low-privileged remote attacker to decrypt encrypted data if weak cipher suites are used.
How severe is CVE-2022-46832?
CVE-2022-46832 has a severity rating of 6.5 (Medium).
What software versions are affected by CVE-2022-46832?
CVE-2022-46832 affects SICK RFU62x firmware versions prior to 2.21.
How can I fix CVE-2022-46832?
To fix CVE-2022-46832, apply the patch and firmware version 2.21 or above for the SICK RFU62x firmware.
Where can I find more information about CVE-2022-46832?
More information about CVE-2022-46832 can be found at the SICK Product Security Incident Response Team (PSIRT) website: [https://sick.com/psirt](https://sick.com/psirt)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/description
- agent/last-modified-date
- agent/author
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/sick
- canonical/sick rfu620 firmware
- canonical/sick rfu620-10100 firmware
- canonical/sick rfu620-10101 firmware
- canonical/sick rfu620-10102 firmware
- canonical/sick rfu620
- canonical/sick rfu620-10103 firmware
- canonical/sick rfu620-10104 firmware
- canonical/sick rfu620-10105 firmware
- canonical/sick rfu620-10108 firmware
- canonical/sick rfu620-10118 firmware
- canonical/sick rfu620-10400 firmware
- canonical/sick rfu620-10500 firmware
- canonical/sick rfu620-10501 firmware
- canonical/sick rfu620-10503 firmware
- canonical/sick rfu620-10504
- canonical/sick rfu620-10507 firmware
- canonical/sick rfu620-10510 firmware
- canonical/sick rfu620-10514 firmware