What is CVE-2022-27577?

CVE-2022-27577 is a critical-severity vulnerability in Sick Msc800, classified under CWE-342. CVSS score: 9.1/10. Published 2022-04-11.

How severe is CVE-2022-27577?

Critical severity. CVSS v3 base score is 9.1 out of 10.

Vulnerability in Sick Msc800

CVE-2022-27577

The vulnerability in the MSC800 in all versions before 4.15 allows for an attacker to predict the TCP initial sequence number. When the TCP sequence is predictable, an attacker can send packets that are forged to appear to come from a trusted computer. These forged packets could compromise services on the MSC800. SICK has released a new firmware version of the SICK MSC800 and recommends updating to the newest version.

Published 2022-04-11 · last modified 2026-06-17.

CVSS v3 metric

CVSS v3 base score 9.1 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H.

EPSS exploit prediction

EPSS: 0.014 (72.7th percentile), scored 2026-10-20.

Low probability of exploitation in the next 30 days, but still tracked. 73rd percentile — 72.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.014 · newest: 0.014 · change: 0.000

Affected products

Sick Msc800
Sick Msc800 Firmware
Sick Msc800 — versions All versions before 4.15

Weakness classification (CWE)

References

sick.com/psirt (Vendor Advisory)

Frequently asked questions

What is CVE-2022-27577?: CVE-2022-27577 is a critical-severity vulnerability in Sick Msc800, classified under CWE-342. CVSS score: 9.1/10. Published 2022-04-11.
How severe is CVE-2022-27577?: Critical severity. CVSS v3 base score is 9.1 out of 10.