Third party vulnerabilities in SICK CDE-100
The SICK CDE-100 uses the open-source libraries FreeRTOS, lwIP and MCU Boot. The used libraries contain vulnerabilities that affect the SICK CDE-100.
describes (10)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-32883US | — | — | ||
MCUboot is a secure bootloader for 32-bits microcontrollers. MCUboot uses a TLV (tag-length-value) structure to represent the meta data associated with an image. The TLVs themselv… | ||||
| CVE-2021-27504US | high7.8 | — | ||
Texas Instruments devices running FREERTOS, malloc returns a valid
pointer to a small buffer on extremely large values, which can trigger
an integer overflow vulnerability in 'ma… | ||||
| CVE-2021-43997US | high7.8 | — | ||
FreeRTOS versions 10.2.0 through 10.4.5 do not prevent non-kernel code from calling the xPortRaisePrivilege internal function to raise privilege. FreeRTOS versions through 10.4.6 d… | ||||
| CVE-2020-22284US | high7.5 | — | ||
A buffer overflow vulnerability in the zepif_linkoutput() function of Free Software Foundation lwIP git head version and version 2.1.2 allows attackers to access sensitive informat… | ||||
| CVE-2020-22283US | high7.5 | — | ||
A buffer overflow vulnerability in the icmp6_send_response_with_addrs_and_netif() function of Free Software Foundation lwIP version git head allows attackers to access sensitive in… | ||||
| CVE-2021-32020US | critical9.8 | — | ||
The kernel in Amazon Web Services FreeRTOS before 10.4.3 has insufficient bounds checking during management of heap memory. | ||||
| CVE-2021-31572US | critical9.8 | — | ||
The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in stream_buffer.c for a stream buffer. | ||||
| CVE-2021-31571US | critical9.8 | — | ||
The kernel in Amazon Web Services FreeRTOS before 10.4.3 has an integer overflow in queue.c for queue creation. | ||||
| CVE-2021-3399US | — | — | ||
| CVE-2021-3890US | — | — | ||
references
External citations — patches, advisories, analysis.
remediations (5)
- WorkaroundSICK CDE-100 all Firmware versions
SICK is currently investigating whether the CDE-100 is impacted by this vulnerability. Please make sure that you apply general security practices when operating the CDE-100 like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK CDE-100 all Firmware versions
SICK is currently investigating whether the CDE-100 is impacted by this vulnerability. Please make sure that you apply general security practices when operating the CDE-100 like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK CDE-100 all Firmware versions
SICK is still investigating if the CDE-100 is affected by this vulnerability. Please make sure that you apply general security practices when operating the CDE-100 like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK CDE-100 all Firmware versions
SICK is still investigating if the CDE-100 is affected by this vulnerability. Please make sure that you apply general security practices when operating the CDE-100 like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK CDE-100 all Firmware versions
SICK is still investigating if the CDE-100 is affected by this vulnerability. Please make sure that you apply general security practices when operating the CDE-100 like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan