Vulnerability in SICK MSC800
view advisory published 2022-04-11
SICK received a report about a vulnerability in the SICK MSC800. An attacker could compromise services on the MSC800 by a TCP sequence prediction attack if a vulnerable version is used.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-27577US | critical9.1OT elevated | — | ||
The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedSICK MSC800 with Firmware <4.15
SICK has released a new firmware version of the SICK MSC800 and recommends updating to the newest version.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan