Skip to content
OpenAdvisories
High SCA-2022-0010 2 CVEs

Vulnerability in SICK Flexi Soft Designer & Safety Designer

Published May 16, 2022 · Updated Jul 19, 2022 · Revision 4

Vendor: SICK Product: Flexi Soft Designer Product: Safety Designer

Summary

A deserialization vulnerability in a .NET framework class used by both SICK Flexi Soft Designer and SICK Safety Designer allows an attacker to create malicious project files.

Vulnerabilities 2

  • Unscored —
    CVE-2022-27579

    A deserialization vulnerability in a .NET framework class used and not properly checked by Flexi Soft Designer in all v…

  • Unscored —
    CVE-2022-27580

    A deserialization vulnerability in a .NET framework class used and not properly checked by Safety Designer all versions…

Revision history

  1. #4

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #3

    Updated Advisory (only visual changes)

  3. #2

    Assigned CVEs

  4. #1

    Initial Release

References