Skip to content
OpenAdvisories
High SCA-2022-0009 0 CVEs

Vulnerability in SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and SICK microScan3 PROFINET

Published Apr 29, 2022 · Updated Apr 29, 2022 · Revision 4

Vendor: SICK Product: FX0-GPNT Product: FX0-GPNT Firmware Product: MICS3-ABAZ40PZ1 Product: MICS3-ABAZ40PZ1 Firmware Product: MICS3-ABAZ55PZ1 Product: MICS3-ABAZ55PZ1 Firmware Product: MICS3-ABAZ90PZ1 Product: MICS3-ABAZ90PZ1 Firmware Product: MICS3-ACAZ40LZ1 Product: MICS3-ACAZ40LZ1 Firmware Product: MICS3-ACAZ40PZ1 Product: MICS3-ACAZ40PZ1 Firmware Product: MICS3-ACAZ55LZ1 Product: MICS3-ACAZ55LZ1 Firmware Product: MICS3-ACAZ55PZ1 Product: MICS3-ACAZ55PZ1 Firmware Product: MICS3-ACAZ90LZ1 Product: MICS3-ACAZ90LZ1 Firmware Product: MICS3-ACAZ90PZ1 Product: MICS3-ACAZ90PZ1 Firmware Product: MICS3-CBAZ40PZ1 Product: MICS3-CBAZ40PZ1 Firmware Product: MICS3-CBAZ55PZ1 Product: MICS3-CBAZ55PZ1 Firmware Product: MICS3-CBAZ90PZ1 Product: MICS3-CBAZ90PZ1 Firmware Product: MICS3-CCAZ40LZ1 Product: MICS3-CCAZ40LZ1 Firmware Product: MICS3-CCAZ40PZ1 +9 more

Summary

The PSIRT received a report about a vulnerability in the Gateway Flexi Soft and microScan3 PROFINET. The vulnerability is classified as a denial-of-service vulnerability and results form a mishandling of Read Implicit Request services.

Revision history

  1. #4

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #3

    Updated Advisory (only visual changes)

  3. #2

    Updated affected products

  4. #1

    Initial Release

References