Summary
SICK received a report about multiple security vulnerabilities in the SICK MARSIC300 device. The security vulnerabilities are caused by the third-party library Dropbear, which is used by the SICK MARSIC300 to provide SSH communication. A successful exploitation of these vulnerabilities could lead to a remote code execution.
SICK has released a new version of the SICK MARSIC300 firmware and recommends updating to the newest version.
Vulnerabilities 2
-
Unscored —CVE-2016-7406 EPSS 10%
Format string vulnerability in Dropbear SSH before 2016.74 allows remote attackers to execute arbitrary code via format…
-
Unscored —
The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted Ope…
Revision history
-
#4
Updated Advisory: URL for SICK Operating Guidelines has been updated
-
#3
Updated Advisory (only visual changes)
-
#2
Fixed TLP classification
-
#1
Initial Release
References
-
SICK PSIRT Security Advisories
https://sick.com/psirt
-
SICK Operating Guidelines
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
-
ICS-CERT recommended practices on Industrial Security
http://ics-cert.us-cert.gov/content/recommended-practices
-
CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1