CVE-2022-27581: Sick RFU610-10600 Firmware

Medium severity, CVSS 6.5. EPSS: 0.3% chance of exploitation in the next 30 days.

Use of a Broken or Risky Cryptographic Algorithm in SICK RFU61x firmware version <v2.25 allows a low-privileged remote attacker to decrypt the encrypted data if the user requested weak cipher suites to be used for encryption via the SSH interface. The patch and installation procedure for the firmware update is available from the responsible SICK customer contact person.

Affected products

• Sick RFU610-10600 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10601 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10603 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10604 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10605 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10607 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10609 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10610 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10613 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10614 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10618 Firmware: before 2.25 (fixed in 2.25)
• Sick RFU610-10700 Firmware: before 2.25 (fixed in 2.25)

Published 2022-12-13. Last modified 2026-06-17.