CVE:CVE-2022-27581
CNNVD:CNNVD-202212-3116
SICK RFU61x是德国西克（SICK）公司的一个 SICK UHF 产品组合中最小的读/写设备。非常适合直接在工件或组件上进行物联网应用。
SICK RFU61x 固件版本 v2.25之前版本存在安全漏洞，该漏洞源于如果用户请求通过 SSH 接口使用弱密码套件进行加密，则在 SICK RFU61x 中使用损坏或有风险的加密算法将允许低权限远程攻击者解密加密数据。
solution:Upgrade sick rfu610-10600_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10601_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10603_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10604_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10605_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10607_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10609_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10610_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10613_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10614_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10618_firmware to a higher version than 2.25,and avoid the version (,2.25); Upgrade sick rfu610-10700_firmware to a higher version than 2.25,and avoid the version (,2.25)