VULNERABILITY INTELLIGENCE

CVE-2022-46834

CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2022-12-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Description

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU65x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Weakness classification

  • psirt@sick.de: CWE-327
  • nvd@nist.gov: CWE-327

Primary references