CVE-2022-46833
Estado: ModificadaMedia (6.5)—
Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 6.5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.32%
- Percentil entre todas las CVEs puntuadas: 23
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (24)
Sick — Rfu630-04100 FirmwareSick — Rfu630-04100s01 FirmwareSick — Rfu630-04101 FirmwareSick — Rfu630-04102 FirmwareSick — Rfu630-04103 FirmwareSick — Rfu630-04104 FirmwareSick — Rfu630-04105 FirmwareSick — Rfu630-04106 FirmwareSick — Rfu630-04109 FirmwareSick — Rfu630-04117 FirmwareSick — Rfu630-13100s01 FirmwareSick — Rfu630-13101 FirmwareSick — Rfu630-13102 FirmwareSick — Rfu630-13103 FirmwareSick — Rfu630-13104 FirmwareSick — Rfu630-13105 FirmwareSick — Rfu630-13106 FirmwareSick — Rfu630-13107 FirmwareSick — Rfu630-13108 FirmwareSick — Rfu630-13110 FirmwareSick — Rfu630-13111 FirmwareSick — Rfu630-13113 FirmwareSick — Rfu630-13114 FirmwareSick — Rfu630-13115 Firmware
CWE
- CWE-327
- CWE-327
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-46833",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-46833",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-04-22T14:30:10.968004Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 6.5,
"attackVector": "NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 2.8
}
]
},
"affected": [
{
"source": "psirt@sick.de",
"affectedData": [
{
"vendor": "n/a",
"product": "SICK RFU63x Firmware",
"versions": [
{
"status": "affected",
"version": "<v2.21"
}
]
}
]
}
],
"published": "2022-12-13T16:15:26.160",
"references": [
{
"url": "https://sick.com/psirt",
"tags": [
"Vendor Advisory"
],
"source": "psirt@sick.de"
},
{
"url": "https://sick.com/psirt",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@sick.de",
"description": [
{
"lang": "en",
"value": "CWE-327"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-327"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Use of a Broken or Risky Cryptographic Algorithm in SICK RFU63x firmware version < v2.21 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person."
},
{
"lang": "es",
"value": "Uso de un algoritmo criptográfico defectuoso o riesgoso en la versión de firmware SICK RFU63x < v2.21 permite a un atacante remoto con pocos privilegios descifrar los datos cifrados si el usuario solicita que se utilicen conjuntos de cifrado débiles para el cifrado a través de la interfaz SSH. El parche y el procedimiento de instalación para la actualización del firmware están disponibles a través de la persona de contacto responsable con el cliente de SICK."
}
],
"lastModified": "2026-06-17T05:12:29.483",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04100_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70EF7DDD-C108-4F2F-923F-2CA69367CC6B",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04100:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4A25A71C-BD2B-451A-B616-F13E827ABBEF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04100s01_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7214D9B3-34C9-414E-B855-0890FDF68091",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04100s01:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E02C6911-4DED-43A5-A53D-1204EC12D8FB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04101_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F52483C1-D518-4A88-BEBA-33520A340139",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04101:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "979F6063-2026-46F9-95AE-7809D8552EAE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04102_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A8EF3A61-D58B-447C-BC1B-232D58609827",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04102:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "CE25B323-CE5A-4E0F-895D-1A06CB2A759B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04103_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7ECE1E40-927F-48B1-9DCE-BC3BD85BAF18",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04103:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D846DCF4-E711-4938-921D-F2B63095628A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04104_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA325DAB-C9AE-40C3-9400-2D07370B9101",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04104:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "305C1449-FE03-4FC2-9B56-F8EC70768B48"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04105_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2FE7AA4F-53D8-4AE9-B48D-F2B5ACDF5FCD",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04105:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "24B96AF0-C044-4D26-BD27-B850E9F3D555"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04106_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "925DE8FE-DF38-4F54-A6CF-689807F3E81D",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04106:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "BC8C1EE3-7029-4D75-8912-58CC33131350"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04109_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "191684F2-2845-4D51-AA15-4C394660F960",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04109:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "3F65DAC2-067A-4A9C-ACBF-71079BF39A4B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-04117_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "64CFE84A-ECD4-41B9-89F6-6160896E8B41",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-04117:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D291B344-7002-4D9F-83EA-2E71B3496B04"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13100s01_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0EA5D46D-3557-44A9-AE61-B4E343AA974E",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13100s01:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "297B6772-D937-4007-8FCF-0E01F3118EC4"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13101_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "58A80A51-C591-455F-93E6-BC18A38F9993",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13101:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "8CA44013-43DF-4848-8A03-79E20490A775"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13102_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65784FAB-553E-45CC-BBC0-98CA91818BCC",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13102:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5075AD7C-0AEE-4BEE-A41C-91E597681707"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13103_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D75DB141-EC20-42A1-B38F-A22A0F8F1F84",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13103:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "83895AE6-D1D0-4C48-BDBC-643E83D10296"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13104_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "692DC244-F6F7-40B9-82AF-5CAC009E9E56",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13104:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7018A9E9-5256-479F-A117-08F5483B610E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13105_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4CE7EA20-2E95-4738-A663-12E839E7E343",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13105:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "594A612A-7412-45B3-B2B8-8AC914DF5E2F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13106_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93C28666-AC4D-4775-815D-24BDF99F33BD",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13106:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "7D9210CC-CA0B-4CE8-913F-2ACE8645FAC6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13107_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "63F82B8B-CB6A-4FB4-A0D0-6D622FAE59AF",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13107:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "35C5D804-DDDA-48E3-B3DF-055BB40D617D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13108_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "94655225-D330-4AC2-A0F9-72C92E6B07F2",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13108:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "32E53461-A275-4309-92B9-9D0CD7ABBC2C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13110_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E43A3B57-7DD2-4405-A595-D11AF9239C7E",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13110:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "F8D6C816-6C82-449D-B8B9-86E124308C0A"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13111_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8D40CB92-F627-40C3-9F79-9EB2083CE215",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13111:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "01F3879B-AD5F-4D02-BDA8-077726F97EEF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13113_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4A45B20C-A15D-4C2A-88A7-4F6CFE5025F4",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13113:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D7C0C79B-4A87-413B-8F85-4D77901DB7DA"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13114_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6354CD6D-C6B9-4754-83C0-54DFFD734339",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13114:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "88011835-0802-494D-BC22-2C425FCBF74E"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:sick:rfu630-13115_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EE2AC8E3-43B4-4E92-AA4B-52DB82D994A3",
"versionEndExcluding": "2.21"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:sick:rfu630-13115:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4440F9FA-4C6F-4F0C-80CD-FCB09D6612C6"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@sick.de"
}