Skip to content
OpenAdvisories
Medium SCA-2022-0008 0 CVEs

Vulnerability in SICK Gateways for Flexi Soft, Flexi Compact, SICK EFI Gateway UE4740, SICK microScan3 and outdoorScan3

Published Apr 29, 2022 · Updated Apr 29, 2022 · Revision 4

Vendor: SICK Product: FLX0-GPNT1 Product: FLX0-GPNT1 Firmware Product: FX0-GENT Product: FX0-GENT Firmware Product: FX0-GPNT Product: FX0-GPNT Firmware Product: FX3-GEPR Product: FX3-GEPR Firmware Product: MICS3-ABAZ40EN1 Product: MICS3-ABAZ40EN1 Firmware Product: MICS3-ABAZ40IZ1 Product: MICS3-ABAZ40IZ1 Firmware Product: MICS3-ABAZ40PZ1 Product: MICS3-ABAZ40PZ1 Firmware Product: MICS3-ABAZ40ZA1 Product: MICS3-ABAZ40ZA1 Firmware Product: MICS3-ABAZ55EN1 Product: MICS3-ABAZ55EN1 Firmware Product: MICS3-ABAZ55IZ1 Product: MICS3-ABAZ55IZ1 Firmware Product: MICS3-ABAZ55PZ1 Product: MICS3-ABAZ55PZ1 Firmware Product: MICS3-ABAZ55ZA1 Product: MICS3-ABAZ55ZA1 Firmware Product: MICS3-ABAZ90EN1 Product: MICS3-ABAZ90EN1 Firmware Product: MICS3-ABAZ90IZ1 Product: MICS3-ABAZ90IZ1 Firmware Product: MICS3-ABAZ90PZ1 +61 more

Summary

The PSIRT received a report about a vulnerability in some gateways for Flexi Soft, Flexi Compact, EFI gateway UE4740, microScan3 and the outdoorScan3. The vulnerability is classified as a denial-of-service vulnerability and results from a malformed UDP package. It is recommended to implement the mitigations described in the mitigations section.

Revision history

  1. #4

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #3

    Updated Advisory (only visual changes)

  3. #2

    Updated affected products

  4. #1

    Initial Release

References