sca-2022-0008
Vulnerability from csaf_sick
Published
2022-04-29 15:00
Modified
2022-04-29 15:00
Summary
Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3
Notes
The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the mitigations described in the mitigations section.
General Security Measures
As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.
Vulnerability Classification
SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer’s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.
{ "document": { "category": "csaf_security_advisory", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en-US", "notes": [ { "category": "summary", "text": "The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the mitigations described in the mitigations section." }, { "category": "general", "text": "As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.", "title": "General Security Measures" }, { "category": "general", "text": "SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer\u2019s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.", "title": "Vulnerability Classification" } ], "publisher": { "category": "vendor", "contact_details": "psirt@sick.de", "issuing_authority": "SICK PSIRT is responsible for any vulnerabilities related to SICK products.", "name": "SICK PSIRT", "namespace": "https://sick.com/psirt" }, "references": [ { "summary": "SICK PSIRT Security Advisories", "url": "https://sick.com/psirt" }, { "summary": "SICK Operating Guidelines", "url": "https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF" }, { "summary": "ICS-CERT recommended practices on Industrial Security", "url": "http://ics-cert.us-cert.gov/content/recommended-practices" }, { "summary": "CVSS v3.1 Calculator", "url": "https://www.first.org/cvss/calculator/3.1" }, { "category": "self", "summary": "The canonical URL.", "url": "https://www.sick.com/.well-known/csaf/white/2022/sca-2022-0008.json" } ], "title": "Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3", "tracking": { "current_release_date": "2022-04-29T15:00:00.000Z", "generator": { "date": "2023-02-10T09:28:23.111Z", "engine": { "name": "Secvisogram", "version": "2.0.0" } }, "id": "SCA-2022-0008", "initial_release_date": "2022-04-29T15:00:00.000Z", "revision_history": [ { "date": "2022-04-29T15:00:00.000Z", "number": "1", "summary": "Initial Release" }, { "date": "2022-06-20T10:00:00.000Z", "number": "2", "summary": "Updated affected products" }, { "date": "2023-02-10T11:00:00.000Z", "number": "3", "summary": "Updated Advisory (only visual changes)" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK FX0-GENT all versions", "product_id": "CSAFPID-0001" } } ], "category": "product_name", "name": "FX0-GENT" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK FX0-GPNT all versions", "product_id": "CSAFPID-0002" } } ], "category": "product_name", "name": "FX0-GPNT" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK FX3-GEPR all versions", "product_id": "CSAFPID-0003" } } ], "category": "product_name", "name": "FX3-GEPR" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK FLX0-GPNT1 all versions", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "FLX0-GPNT1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK UE4740 EFI gateway all versions", "product_id": "CSAFPID-0005" } } ], "category": "product_name", "name": "UE4740 EFI gateway" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ90PZ1 all versions", "product_id": "CSAFPID-0006", "product_identification_helper": { "skus": [ "1100407" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ90PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ55PZ1 all versions", "product_id": "CSAFPID-0007", "product_identification_helper": { "skus": [ "1100391" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ55PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ90PZ1 all versions", "product_id": "CSAFPID-0008", "product_identification_helper": { "skus": [ "1100393" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ90PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ55LZ1 all versions", "product_id": "CSAFPID-0009", "product_identification_helper": { "skus": [ "1100385" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ55LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ90LZ1 all versions", "product_id": "CSAFPID-0010", "product_identification_helper": { "skus": [ "1100387" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ90LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ40PZ1 all versions", "product_id": "CSAFPID-0011", "product_identification_helper": { "skus": [ "1100403" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ40PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ55PZ1 all versions", "product_id": "CSAFPID-0012", "product_identification_helper": { "skus": [ "1100405" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ55PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ40PZ1 all versions", "product_id": "CSAFPID-0013", "product_identification_helper": { "skus": [ "1083011" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ40PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ55PZ1 all versions", "product_id": "CSAFPID-0014", "product_identification_helper": { "skus": [ "1083009" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ55PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ40PZ1 all versions", "product_id": "CSAFPID-0015", "product_identification_helper": { "skus": [ "1092718" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ40PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ55PZ1 all versions", "product_id": "CSAFPID-0016", "product_identification_helper": { "skus": [ "1092718" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ55PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ90PZ1 all versions", "product_id": "CSAFPID-0017", "product_identification_helper": { "skus": [ "1094458" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ90PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ90PZ1 all versions", "product_id": "CSAFPID-0018", "product_identification_helper": { "skus": [ "1094462" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ90PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ40PZ1 all versions", "product_id": "CSAFPID-0019", "product_identification_helper": { "skus": [ "1100389" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ40PZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ55LZ1 all versions", "product_id": "CSAFPID-0020", "product_identification_helper": { "skus": [ "1100399" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ55LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ90LZ1 all versions", "product_id": "CSAFPID-0021", "product_identification_helper": { "skus": [ "1100401" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ90LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ40LZ1 all versions", "product_id": "CSAFPID-0022", "product_identification_helper": { "skus": [ "1100397" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ40LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ACAZ40LZ1 all versions", "product_id": "CSAFPID-0023", "product_identification_helper": { "skus": [ "1100383" ] } } } ], "category": "product_name", "name": "MICS3-ACAZ40LZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ55IZ1 all versions", "product_id": "CSAFPID-0024", "product_identification_helper": { "skus": [ "1075848" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ55IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ40IZ1 all versions", "product_id": "CSAFPID-0025", "product_identification_helper": { "skus": [ "1075845" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ40IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ40IZ1 all versions", "product_id": "CSAFPID-0026", "product_identification_helper": { "skus": [ "1092540" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ40IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ55IZ1 all versions", "product_id": "CSAFPID-0027", "product_identification_helper": { "skus": [ "1092541" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ55IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ90IZ1 all versions", "product_id": "CSAFPID-0028", "product_identification_helper": { "skus": [ "1094460" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ90IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ90IZ1 all versions", "product_id": "CSAFPID-0029", "product_identification_helper": { "skus": [ "1094456" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ90IZ1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ90AA1 all versions", "product_id": "CSAFPID-0030", "product_identification_helper": { "skus": [ "1110037" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ90AA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ40AA1 all versions", "product_id": "CSAFPID-0031", "product_identification_helper": { "skus": [ "1110035" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ40AA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ55ZA1 all versions", "product_id": "CSAFPID-0032", "product_identification_helper": { "skus": [ "1092538" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ55ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ40ZA1 all versions", "product_id": "CSAFPID-0033", "product_identification_helper": { "skus": [ "1092539" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ40ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ55ZA1 all versions", "product_id": "CSAFPID-0034", "product_identification_helper": { "skus": [ "1091038" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ55ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ40ZA1 all versions", "product_id": "CSAFPID-0035", "product_identification_helper": { "skus": [ "1091037" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ40ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ90ZA1 all versions", "product_id": "CSAFPID-0036", "product_identification_helper": { "skus": [ "1094455" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ90ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ90ZA1 all versions", "product_id": "CSAFPID-0037", "product_identification_helper": { "skus": [ "1094465" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ90ZA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CCAZ55AA1 all versions", "product_id": "CSAFPID-0038", "product_identification_helper": { "skus": [ "1110033" ] } } } ], "category": "product_name", "name": "MICS3-CCAZ55AA1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ90EN1 all versions", "product_id": "CSAFPID-0039", "product_identification_helper": { "skus": [ "1108229" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ90EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ90EN1 all versions", "product_id": "CSAFPID-0040", "product_identification_helper": { "skus": [ "1108235" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ90EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ40EN1 all versions", "product_id": "CSAFPID-0041", "product_identification_helper": { "skus": [ "1108231" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ40EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-ABAZ55EN1 all versions", "product_id": "CSAFPID-0042", "product_identification_helper": { "skus": [ "1108233" ] } } } ], "category": "product_name", "name": "MICS3-ABAZ55EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ55EN1 all versions", "product_id": "CSAFPID-0043", "product_identification_helper": { "skus": [ "1104317" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ55EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBAZ40EN1 all versions", "product_id": "CSAFPID-0044", "product_identification_helper": { "skus": [ "1108227" ] } } } ], "category": "product_name", "name": "MICS3-CBAZ40EN1" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK MICS3-CBUZ40IZ1 all versions", "product_id": "CSAFPID-0045", "product_identification_helper": { "skus": [ "1094472" ] } } } ], "category": "product_name", "name": "MICS3-CBUZ40IZ1" }, { "branches": [ { "category": "product_version", "name": "3.04.0", "product": { "name": "SICK FX0-GENT Firmware 3.04.0", "product_id": "CSAFPID-0046" } }, { "category": "product_version", "name": "3.05.0", "product": { "name": "SICK FX0-GENT Firmware 3.05.0", "product_id": "CSAFPID-0047" } } ], "category": "product_name", "name": "FX0-GENT Firmware" }, { "branches": [ { "category": "product_version", "name": "3.04.0", "product": { "name": "SICK FX0-GPNT Firmware 3.04.0", "product_id": "CSAFPID-0048" } }, { "category": "product_version", "name": "3.05.0", "product": { "name": "SICK FX0-GPNT Firmware 3.05.0", "product_id": "CSAFPID-0049" } } ], "category": "product_name", "name": "FX0-GPNT Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003c=1.07.0", "product": { "name": "SICK FX3-GEPR Firmware \u003c=1.07.0", "product_id": "CSAFPID-0050" } } ], "category": "product_name", "name": "FX3-GEPR Firmware" }, { "branches": [ { "category": "product_version", "name": "1.01.0", "product": { "name": "SICK FLX0-GPNT1 Firmware 1.01.0", "product_id": "CSAFPID-0051" } } ], "category": "product_name", "name": "FLX0-GPNT1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "vers:all/*", "product": { "name": "SICK UE4740 EFI gateway Firmware all versions", "product_id": "CSAFPID-0052" } } ], "category": "product_name", "name": "UE4740 EFI gateway Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ABAZ90PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0053" } } ], "category": "product_name", "name": "MICS3-ABAZ90PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ55PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0054" } } ], "category": "product_name", "name": "MICS3-CCAZ55PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ90PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0055" } } ], "category": "product_name", "name": "MICS3-CCAZ90PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ55LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0056" } } ], "category": "product_name", "name": "MICS3-ACAZ55LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ90LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0057" } } ], "category": "product_name", "name": "MICS3-ACAZ90LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ABAZ40PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0058" } } ], "category": "product_name", "name": "MICS3-ABAZ40PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ABAZ55PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0059" } } ], "category": "product_name", "name": "MICS3-ABAZ55PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ40PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0060" } } ], "category": "product_name", "name": "MICS3-ACAZ40PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ55PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0061" } } ], "category": "product_name", "name": "MICS3-ACAZ55PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CBAZ40PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0062" } } ], "category": "product_name", "name": "MICS3-CBAZ40PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CBAZ55PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0063" } } ], "category": "product_name", "name": "MICS3-CBAZ55PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ90PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0064" } } ], "category": "product_name", "name": "MICS3-ACAZ90PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CBAZ90PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0065" } } ], "category": "product_name", "name": "MICS3-CBAZ90PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ40PZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0066" } } ], "category": "product_name", "name": "MICS3-CCAZ40PZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ55LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0067" } } ], "category": "product_name", "name": "MICS3-CCAZ55LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ90LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0068" } } ], "category": "product_name", "name": "MICS3-CCAZ90LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-CCAZ40LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0069" } } ], "category": "product_name", "name": "MICS3-CCAZ40LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.23\u0026\u003c=1.76", "product": { "name": "SICK MICS3-ACAZ40LZ1 Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0070" } } ], "category": "product_name", "name": "MICS3-ACAZ40LZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ55IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0071" } } ], "category": "product_name", "name": "MICS3-ABAZ55IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ40IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0072" } } ], "category": "product_name", "name": "MICS3-ABAZ40IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ40IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0073" } } ], "category": "product_name", "name": "MICS3-CBAZ40IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ55IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0074" } } ], "category": "product_name", "name": "MICS3-CBAZ55IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ90IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0075" } } ], "category": "product_name", "name": "MICS3-CBAZ90IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ90IZ1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0076" } } ], "category": "product_name", "name": "MICS3-ABAZ90IZ1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CCAZ90AA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0077" } } ], "category": "product_name", "name": "MICS3-CCAZ90AA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CCAZ40AA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0078" } } ], "category": "product_name", "name": "MICS3-CCAZ40AA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ55ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0079" } } ], "category": "product_name", "name": "MICS3-ABAZ55ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ40ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0080" } } ], "category": "product_name", "name": "MICS3-ABAZ40ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ55ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0081" } } ], "category": "product_name", "name": "MICS3-CBAZ55ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ40ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0082" } } ], "category": "product_name", "name": "MICS3-CBAZ40ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-ABAZ90ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0083" } } ], "category": "product_name", "name": "MICS3-ABAZ90ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CBAZ90ZA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0084" } } ], "category": "product_name", "name": "MICS3-CBAZ90ZA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.14\u0026\u003c=1.53", "product": { "name": "SICK MICS3-CCAZ55AA1 Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0085" } } ], "category": "product_name", "name": "MICS3-CCAZ55AA1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-CBAZ90EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0086" } } ], "category": "product_name", "name": "MICS3-CBAZ90EN1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-ABAZ90EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0087" } } ], "category": "product_name", "name": "MICS3-ABAZ90EN1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-ABAZ40EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0088" } } ], "category": "product_name", "name": "MICS3-ABAZ40EN1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-ABAZ55EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0089" } } ], "category": "product_name", "name": "MICS3-ABAZ55EN1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-CBAZ55EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0090" } } ], "category": "product_name", "name": "MICS3-CBAZ55EN1 Firmware" }, { "branches": [ { "category": "product_version_range", "name": "\u003e=1.52\u0026\u003c=1.76, if (Ethernet over EtherCAT) enabled", "product": { "name": "SICK MICS3-CBAZ40EN1 Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0091" } } ], "category": "product_name", "name": "MICS3-CBAZ40EN1 Firmware" }, { "branches": [ { "category": "product_version", "name": "1.43", "product": { "name": "SICK MICS3-CBUZ40IZ1 Firmware 1.43", "product_id": "CSAFPID-0092" } } ], "category": "product_name", "name": "MICS3-CBUZ40IZ1 Firmware" } ], "category": "vendor", "name": "SICK AG" } ], "relationships": [ { "category": "installed_on", "full_product_name": { "name": "SICK FX0-GENT with Firmware 3.04.0", "product_id": "CSAFPID-0093" }, "product_reference": "CSAFPID-0046", "relates_to_product_reference": "CSAFPID-0001" }, { "category": "installed_on", "full_product_name": { "name": "SICK FX0-GENT with Firmware 3.05.0", "product_id": "CSAFPID-0094" }, "product_reference": "CSAFPID-0047", "relates_to_product_reference": "CSAFPID-0001" }, { "category": "installed_on", "full_product_name": { "name": "SICK FX0-GPNT with Firmware 3.04.0", "product_id": "CSAFPID-0095" }, "product_reference": "CSAFPID-0048", "relates_to_product_reference": "CSAFPID-0002" }, { "category": "installed_on", "full_product_name": { "name": "SICK FX0-GPNT with Firmware 3.05.0", "product_id": "CSAFPID-0096" }, "product_reference": "CSAFPID-0049", "relates_to_product_reference": "CSAFPID-0002" }, { "category": "installed_on", "full_product_name": { "name": "SICK FX3-GEPR with Firmware \u003c=1.07.0", "product_id": "CSAFPID-0097" }, "product_reference": "CSAFPID-0050", "relates_to_product_reference": "CSAFPID-0003" }, { "category": "installed_on", "full_product_name": { "name": "SICK FLX0-GPNT1 with Firmware 1.01.0", "product_id": "CSAFPID-0098" }, "product_reference": "CSAFPID-0051", "relates_to_product_reference": "CSAFPID-0004" }, { "category": "installed_on", "full_product_name": { "name": "SICK UE4740 EFI gateway all Firmware versions", "product_id": "CSAFPID-0099" }, "product_reference": "CSAFPID-0052", "relates_to_product_reference": "CSAFPID-0005" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ90PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0100" }, "product_reference": "CSAFPID-0053", "relates_to_product_reference": "CSAFPID-0006" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ55PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0101" }, "product_reference": "CSAFPID-0054", "relates_to_product_reference": "CSAFPID-0007" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ90PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0102" }, "product_reference": "CSAFPID-0055", "relates_to_product_reference": "CSAFPID-0008" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ55LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0103" }, "product_reference": "CSAFPID-0056", "relates_to_product_reference": "CSAFPID-0009" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ90LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0104" }, "product_reference": "CSAFPID-0057", "relates_to_product_reference": "CSAFPID-0010" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ40PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0105" }, "product_reference": "CSAFPID-0058", "relates_to_product_reference": "CSAFPID-0011" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ55PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0106" }, "product_reference": "CSAFPID-0059", "relates_to_product_reference": "CSAFPID-0012" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ40PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0107" }, "product_reference": "CSAFPID-0060", "relates_to_product_reference": "CSAFPID-0013" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ55PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0108" }, "product_reference": "CSAFPID-0061", "relates_to_product_reference": "CSAFPID-0014" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ40PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0109" }, "product_reference": "CSAFPID-0062", "relates_to_product_reference": "CSAFPID-0015" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ55PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0110" }, "product_reference": "CSAFPID-0063", "relates_to_product_reference": "CSAFPID-0016" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ90PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0111" }, "product_reference": "CSAFPID-0064", "relates_to_product_reference": "CSAFPID-0017" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ90PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0112" }, "product_reference": "CSAFPID-0065", "relates_to_product_reference": "CSAFPID-0018" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ40PZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0113" }, "product_reference": "CSAFPID-0066", "relates_to_product_reference": "CSAFPID-0019" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ55LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0114" }, "product_reference": "CSAFPID-0067", "relates_to_product_reference": "CSAFPID-0020" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ90LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0115" }, "product_reference": "CSAFPID-0068", "relates_to_product_reference": "CSAFPID-0021" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ40LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0116" }, "product_reference": "CSAFPID-0069", "relates_to_product_reference": "CSAFPID-0022" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ACAZ40LZ1 with Firmware 1.23 up to 1.76", "product_id": "CSAFPID-0117" }, "product_reference": "CSAFPID-0070", "relates_to_product_reference": "CSAFPID-0023" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ55IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0118" }, "product_reference": "CSAFPID-0071", "relates_to_product_reference": "CSAFPID-0024" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ40IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0119" }, "product_reference": "CSAFPID-0072", "relates_to_product_reference": "CSAFPID-0025" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ40IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0120" }, "product_reference": "CSAFPID-0073", "relates_to_product_reference": "CSAFPID-0026" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ55IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0121" }, "product_reference": "CSAFPID-0074", "relates_to_product_reference": "CSAFPID-0027" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ90IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0122" }, "product_reference": "CSAFPID-0075", "relates_to_product_reference": "CSAFPID-0028" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ90IZ1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0123" }, "product_reference": "CSAFPID-0076", "relates_to_product_reference": "CSAFPID-0029" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ90AA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0124" }, "product_reference": "CSAFPID-0077", "relates_to_product_reference": "CSAFPID-0030" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ40AA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0125" }, "product_reference": "CSAFPID-0078", "relates_to_product_reference": "CSAFPID-0031" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ55ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0126" }, "product_reference": "CSAFPID-0079", "relates_to_product_reference": "CSAFPID-0032" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ40ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0127" }, "product_reference": "CSAFPID-0080", "relates_to_product_reference": "CSAFPID-0033" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ55ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0128" }, "product_reference": "CSAFPID-0081", "relates_to_product_reference": "CSAFPID-0034" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ40ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0129" }, "product_reference": "CSAFPID-0082", "relates_to_product_reference": "CSAFPID-0035" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ90ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0130" }, "product_reference": "CSAFPID-0083", "relates_to_product_reference": "CSAFPID-0036" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ90ZA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0131" }, "product_reference": "CSAFPID-0084", "relates_to_product_reference": "CSAFPID-0037" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CCAZ55AA1 with Firmware 1.14 up to 1.53", "product_id": "CSAFPID-0132" }, "product_reference": "CSAFPID-0085", "relates_to_product_reference": "CSAFPID-0038" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ90EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0133" }, "product_reference": "CSAFPID-0086", "relates_to_product_reference": "CSAFPID-0039" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ90EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0134" }, "product_reference": "CSAFPID-0087", "relates_to_product_reference": "CSAFPID-0040" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ40EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0135" }, "product_reference": "CSAFPID-0088", "relates_to_product_reference": "CSAFPID-0041" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-ABAZ55EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0136" }, "product_reference": "CSAFPID-0089", "relates_to_product_reference": "CSAFPID-0042" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ55EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0137" }, "product_reference": "CSAFPID-0090", "relates_to_product_reference": "CSAFPID-0043" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBAZ40EN1 with Firmware 1.52 up to 1.76, if (Ethernet over EtherCAT) enabled", "product_id": "CSAFPID-0138" }, "product_reference": "CSAFPID-0091", "relates_to_product_reference": "CSAFPID-0044" }, { "category": "installed_on", "full_product_name": { "name": "SICK MICS3-CBUZ40IZ1 with Firmware 1.43", "product_id": "CSAFPID-0139" }, "product_reference": "CSAFPID-0092", "relates_to_product_reference": "CSAFPID-0045" } ] }, "vulnerabilities": [ { "cwe": { "id": "CWE-400", "name": "Uncontrolled Resource Consumption" }, "notes": [ { "category": "summary", "text": "The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. An attacker could use this vulnerability to affect the availability of the safety controllers Flexi Soft, Flexi Compact, EFI gateway UE4740 and the safety laser scanners mircoScan3 and outdoorScan3. Even if Flexi Soft, Flexi Compact, UE4740, microScan3 or outdoorScan3 are made unavailable, no safety issue ensues. The main module of the gateways set its outputs in the safe state (low). It is recommended to implement the mitigations described in the mitigations section.", "title": "Summary" } ], "product_status": { "known_affected": [ "CSAFPID-0093", "CSAFPID-0094", "CSAFPID-0095", "CSAFPID-0096", "CSAFPID-0097", "CSAFPID-0098", "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101", "CSAFPID-0102", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0105", "CSAFPID-0106", "CSAFPID-0107", "CSAFPID-0108", "CSAFPID-0109", "CSAFPID-0110", "CSAFPID-0111", "CSAFPID-0112", "CSAFPID-0113", "CSAFPID-0114", "CSAFPID-0115", "CSAFPID-0116", "CSAFPID-0117", "CSAFPID-0118", "CSAFPID-0119", "CSAFPID-0120", "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0127", "CSAFPID-0128", "CSAFPID-0129", "CSAFPID-0130", "CSAFPID-0131", "CSAFPID-0132", "CSAFPID-0133", "CSAFPID-0134", "CSAFPID-0135", "CSAFPID-0136", "CSAFPID-0137", "CSAFPID-0138", "CSAFPID-0139" ] }, "remediations": [ { "category": "none_available", "details": "Currently there is no remediation.", "product_ids": [ "CSAFPID-0093", "CSAFPID-0094", "CSAFPID-0095", "CSAFPID-0096", "CSAFPID-0097", "CSAFPID-0098", "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101", "CSAFPID-0102", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0105", "CSAFPID-0106", "CSAFPID-0107", "CSAFPID-0108", "CSAFPID-0109", "CSAFPID-0110", "CSAFPID-0111", "CSAFPID-0112", "CSAFPID-0113", "CSAFPID-0114", "CSAFPID-0115", "CSAFPID-0116", "CSAFPID-0117", "CSAFPID-0118", "CSAFPID-0119", "CSAFPID-0120", "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0127", "CSAFPID-0128", "CSAFPID-0129", "CSAFPID-0130", "CSAFPID-0131", "CSAFPID-0132", "CSAFPID-0133", "CSAFPID-0134", "CSAFPID-0135", "CSAFPID-0136", "CSAFPID-0137", "CSAFPID-0138", "CSAFPID-0139" ] }, { "category": "mitigation", "details": "Please make sure that you apply general security practices when operating the FlexiSoft, FlexiCompact, UE4740 EFI gateway, mircoScan3 and outdoorScan3. The following general security practices could mitigate the associated security risk.", "product_ids": [ "CSAFPID-0093", "CSAFPID-0094", "CSAFPID-0095", "CSAFPID-0096", "CSAFPID-0097", "CSAFPID-0098", "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101", "CSAFPID-0102", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0105", "CSAFPID-0106", "CSAFPID-0107", "CSAFPID-0108", "CSAFPID-0109", "CSAFPID-0110", "CSAFPID-0111", "CSAFPID-0112", "CSAFPID-0113", "CSAFPID-0114", "CSAFPID-0115", "CSAFPID-0116", "CSAFPID-0117", "CSAFPID-0118", "CSAFPID-0119", "CSAFPID-0120", "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0127", "CSAFPID-0128", "CSAFPID-0129", "CSAFPID-0130", "CSAFPID-0131", "CSAFPID-0132", "CSAFPID-0133", "CSAFPID-0134", "CSAFPID-0135", "CSAFPID-0136", "CSAFPID-0137", "CSAFPID-0138", "CSAFPID-0139" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1" }, "products": [ "CSAFPID-0093", "CSAFPID-0094", "CSAFPID-0095", "CSAFPID-0096", "CSAFPID-0097", "CSAFPID-0098", "CSAFPID-0099", "CSAFPID-0100", "CSAFPID-0101", "CSAFPID-0102", "CSAFPID-0103", "CSAFPID-0104", "CSAFPID-0105", "CSAFPID-0106", "CSAFPID-0107", "CSAFPID-0108", "CSAFPID-0109", "CSAFPID-0110", "CSAFPID-0111", "CSAFPID-0112", "CSAFPID-0113", "CSAFPID-0114", "CSAFPID-0115", "CSAFPID-0116", "CSAFPID-0117", "CSAFPID-0118", "CSAFPID-0119", "CSAFPID-0120", "CSAFPID-0121", "CSAFPID-0122", "CSAFPID-0123", "CSAFPID-0124", "CSAFPID-0125", "CSAFPID-0126", "CSAFPID-0127", "CSAFPID-0128", "CSAFPID-0129", "CSAFPID-0130", "CSAFPID-0131", "CSAFPID-0132", "CSAFPID-0133", "CSAFPID-0134", "CSAFPID-0135", "CSAFPID-0136", "CSAFPID-0137", "CSAFPID-0138", "CSAFPID-0139" ] } ], "threats": [ { "category": "impact", "details": "An attacker that has access to one of the above listed products with the corresponding firmware versions could affect the availability by exploiting the gateways or the devices with a malformed UDP header. This forces the main module of the gateways to set its outputs in the safe state (low)." } ] } ] }
Loading…
Loading…
Sightings
Author | Source | Type | Date |
---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
- Confirmed: The vulnerability is confirmed from an analyst perspective.
- Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
- Patched: This vulnerability was successfully patched by the user reporting the sighting.
- Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
- Not confirmed: The user expresses doubt about the veracity of the vulnerability.
- Not patched: This vulnerability was not successfully patched by the user reporting the sighting.