Summary
The security-testlab team of Fraunhofer IOSB in Karlsruhe reported a security vulnerability that affects SICK FX0-GPNT00000 and SICK FX0-GENT00000 in the version V3.04.0. The SICK FX0-GPNT00000 and SICK FX0-GENT00000 are vulnerable to a buffer overflow by exploiting the available resources with UDP packets, causing the Flexi Soft System to switch to safety state. Currently SICK is not aware of any public exploits specifically targeting this vulnerability.
SICK has released a new firmware version for the SICK FX0-GPNT00000 and SICK FX0-GENT00000 and
recommends using the new version.
Vulnerabilities 1
-
Unscored —
SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow
Revision history
-
#3
Updated Advisory: URL for SICK Operating Guidelines has been updated
-
#2
Updated Advisory (only visual changes)
-
#1
Initial Release
References
-
SICK PSIRT Security Advisories
https://sick.com/psirt
-
SICK Operating Guidelines
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
-
ICS-CERT recommended practices on Industrial Security
http://ics-cert.us-cert.gov/content/recommended-practices
-
CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1