VULNERABILITY INTELLIGENCE

CVE-2022-46833

CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2022-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Weakness classification

  • psirt@sick.de: CWE-327
  • nvd@nist.gov: CWE-327

Primary references