SCA-2019-0002

csafDEsick_psirt

Vulnerability in SICK FX0-GENT00000 and SICK FX0-GPNT00000

view advisory published 2019-09-20

The security-testlab team of Fraunhofer IOSB in Karlsruhe reported a security vulnerability that affects SICK FX0-GPNT00000 and SICK FX0-GENT00000 in the version V3.04.0. The SICK FX0-GPNT00000 and SICK FX0-GENT00000 are vulnerable to a buffer overflow by exploiting the available resources with UDP packets, causing the Flexi Soft System to switch to safety state. Currently SICK is not aware of any public exploits specifically targeting this vulnerability. SICK has released a new firmware version for the SICK FX0-GPNT00000 and SICK FX0-GENT00000 and recommends using the new version.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2019-14753UShigh7.5—
SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedSICK FX0-GENT00000 with Firmware 3.04.0

    SICK has released a new firmware version for the FX0 GPNT00000 and SICK FX0-GENT00000 and recommends using the new version V3.05.0.

  • FixedSICK FX0-GPNT00000 with Firmware 3.04.0

    SICK has released a new firmware version for the FX0 GPNT00000 and SICK FX0-GENT00000 and recommends using the new version V3.05.0.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan