What is CVE-2022-27577?

CVE-2022-27577 is a critical-severity vulnerability in Sick Msc800, classified under CWE-342. CVSS score: 9.1/10. Published 2022-04-11.

How severe is CVE-2022-27577?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Sick Msc800

CVE-2022-27577

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trus…

EPSS: 0.014 (69.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.

Affected products

Sick Msc800
Sick Msc800_firmware
N/a Sick Msc800 — versions All versions before 4.15

Weakness classification (CWE)

CWE-342
CWE-330 — Use of Insufficiently Random Values

References

psirt@sick.de (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2022-27577?: CVE-2022-27577 is a critical-severity vulnerability in Sick Msc800, classified under CWE-342. CVSS score: 9.1/10. Published 2022-04-11.
How severe is CVE-2022-27577?: Critical severity. CVSS v3 base score is 9.1 out of 10.