CVE-2025-32471: falha de baixa gravidade em SICK FLX3-CPUC200
Reuse of salt
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.7epss 0.4%
The device’s passwords have not been adequately salted, making them vulnerable to password extraction attacks.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
CVEs relacionadas — SICK FLX3-CPUC200
No mesmo produto, das mais perigosas para as menos.
CVE-2024-10771HIGHSICK InspectorP61x, SICK InspectorP62x and SICK TiM3xx are vulnerable for remote code executionEPSS 1.1%CVE-2025-32470HIGHUnauthenticated change of IP adressEPSS 0.7%CVE-2026-22908CRITICALCVE-2026-22908EPSS 0.6%CVE-2026-22909HIGHCVE-2026-22909EPSS 0.6%CVE-2026-22917MEDIUMCVE-2026-22917EPSS 0.6%CVE-2026-22911MEDIUMCVE-2026-22911EPSS 0.5%
Referências
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDFhttps://sick.com/psirthttps://www.cisa.gov/resources-tools/resources/ics-recommended-practiceshttps://www.first.org/cvss/calculator/3.1https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.jsonhttps://www.sick.com/.well-known/csaf/white/2025/sca-2025-0005.pdf