CVE-2022-27583

2022-10-3100:00:00

CWE-285

SICK AG

www.cve.org

remote access

configuration interface

unprivileged attacker

availability impact

firmware vulnerability

9.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.3%

JSON

A remote unprivileged attacker can interact with the configuration interface of a Flexi-Compact FLX3-CPUC1 or FLX3-CPUC2 running an affected firmware version to potentially impact the availability of the FlexiCompact.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "SICK FlexiCompact",
    "versions": [
      {
        "version": "< V1.10.0",
        "status": "affected"
      }
    ]
  }
]

References

sick.com/psirt