{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "general",
        "text": "As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.",
        "title": "General Security Measures"
      },
      {
        "category": "general",
        "text": "SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer\u2019s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.",
        "title": "Vulnerability Classification"
      },
      {
        "category": "summary",
        "text": "The PSIRT received a report about a vulnerability in the Gateway Flexi Soft and microScan3 PROFINET. The vulnerability is classified as a denial-of-service vulnerability and results form a mishandling of Read Implicit Request services."
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@sick.de",
      "issuing_authority": "SICK PSIRT is responsible for any vulnerabilities related to SICK products.",
      "name": "SICK PSIRT",
      "namespace": "https://sick.com/psirt"
    },
    "references": [
      {
        "summary": "SICK PSIRT Security Advisories",
        "url": "https://sick.com/psirt"
      },
      {
        "summary": "SICK Operating Guidelines",
        "url": "https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF"
      },
      {
        "summary": "ICS-CERT recommended practices on Industrial Security",
        "url": "http://ics-cert.us-cert.gov/content/recommended-practices"
      },
      {
        "summary": "CVSS v3.1 Calculator",
        "url": "https://www.first.org/cvss/calculator/3.1"
      },
      {
        "category": "self",
        "summary": "The canonical URL.",
        "url": "https://www.sick.com/.well-known/csaf/white/2022/sca-2022-0009.json"
      }
    ],
    "title": "Vulnerability in SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and SICK microScan3 PROFINET",
    "tracking": {
      "current_release_date": "2022-04-29T15:00:00.000Z",
      "generator": {
        "date": "2023-02-10T09:40:16.807Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.0.0"
        }
      },
      "id": "SCA-2022-0009",
      "initial_release_date": "2022-04-29T15:00:00.000Z",
      "revision_history": [
        {
          "date": "2022-04-29T15:00:00.000Z",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2022-06-20T10:00:00.000Z",
          "number": "2",
          "summary": "Updated affected products"
        },
        {
          "date": "2023-02-10T11:00:00.000Z",
          "number": "3",
          "summary": "Updated Advisory (only visual changes)"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK FX0-GPNT all versions",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "FX0-GPNT"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ABAZ90PZ1 all versions",
                      "product_id": "CSAFPID-0002",
                      "product_identification_helper": {
                        "skus": [
                          "1100407"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651061"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ABAZ90PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ55PZ1 all versions",
                      "product_id": "CSAFPID-0003",
                      "product_identification_helper": {
                        "skus": [
                          "1100391"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651068"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ55PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ90PZ1 all versions",
                      "product_id": "CSAFPID-0004",
                      "product_identification_helper": {
                        "skus": [
                          "1100393"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651070"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ90PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ55LZ1 all versions",
                      "product_id": "CSAFPID-0005",
                      "product_identification_helper": {
                        "skus": [
                          "1100385"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651063"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ55LZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ90LZ1 all versions",
                      "product_id": "CSAFPID-0006",
                      "product_identification_helper": {
                        "skus": [
                          "1100387"
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ90LZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ABAZ40PZ1 all versions",
                      "product_id": "CSAFPID-0007",
                      "product_identification_helper": {
                        "skus": [
                          "1100403"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651059"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ABAZ40PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ABAZ55PZ1 all versions",
                      "product_id": "CSAFPID-0008",
                      "product_identification_helper": {
                        "skus": [
                          "1100405"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651060"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ABAZ55PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ40PZ1 all versions",
                      "product_id": "CSAFPID-0009",
                      "product_identification_helper": {
                        "skus": [
                          "1083011"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p529646"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ40PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ55PZ1 all versions",
                      "product_id": "CSAFPID-0010",
                      "product_identification_helper": {
                        "skus": [
                          "1083009"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p529647"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ55PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CBAZ40PZ1 all versions",
                      "product_id": "CSAFPID-0011",
                      "product_identification_helper": {
                        "skus": [
                          "1092718"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p574157"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CBAZ40PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CBAZ55PZ1 all versions",
                      "product_id": "CSAFPID-0012",
                      "product_identification_helper": {
                        "skus": [
                          "1092718"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p574157"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CBAZ55PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ90PZ1 all versions",
                      "product_id": "CSAFPID-0013",
                      "product_identification_helper": {
                        "skus": [
                          "1094458"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p606747"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ90PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CBAZ90PZ1 all versions",
                      "product_id": "CSAFPID-0014",
                      "product_identification_helper": {
                        "skus": [
                          "1094462"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p606745"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CBAZ90PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ40PZ1 all versions",
                      "product_id": "CSAFPID-0015",
                      "product_identification_helper": {
                        "skus": [
                          "1100389"
                        ],
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/p/p651066"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ40PZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ55LZ1 all versions",
                      "product_id": "CSAFPID-0016",
                      "product_identification_helper": {
                        "skus": [
                          "1100399"
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ55LZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ90LZ1 all versions",
                      "product_id": "CSAFPID-0017",
                      "product_identification_helper": {
                        "skus": [
                          "1100401"
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ90LZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-CCAZ40LZ1 all versions",
                      "product_id": "CSAFPID-0018",
                      "product_identification_helper": {
                        "skus": [
                          "1100397"
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-CCAZ40LZ1"
              },
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK MICS3-ACAZ40LZ1 all versions",
                      "product_id": "CSAFPID-0019",
                      "product_identification_helper": {
                        "skus": [
                          "1100383"
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "MICS3-ACAZ40LZ1"
              }
            ],
            "category": "product_family",
            "name": "MICS3"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "3.04.0",
                "product": {
                  "name": "SICK FX0-GPNT Firmware 3.04.0",
                  "product_id": "CSAFPID-0020"
                }
              },
              {
                "category": "product_version",
                "name": "3.05.0",
                "product": {
                  "name": "SICK FX0-GPNT Firmware 3.05.0",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "FX0-GPNT Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ABAZ90PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0022"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ABAZ90PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ55PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ55PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ90PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0024"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ90PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ55LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ55LZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ90LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0026"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ90LZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ABAZ40PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ABAZ40PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ABAZ55PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0028"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ABAZ55PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ40PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ40PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ55PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0030"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ55PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CBAZ40PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CBAZ40PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CBAZ55PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0032"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CBAZ55PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ90PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ90PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CBAZ90PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CBAZ90PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ40PZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ40PZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ55LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0036"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ55LZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ90LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ90LZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-CCAZ40LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0038"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-CCAZ40LZ1 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=1.23\u0026\u003c=1.47",
                "product": {
                  "name": "SICK MICS3-ACAZ40LZ1 Firmware 1.23 up to 1.47",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "MICS3-ACAZ40LZ1 Firmware"
          }
        ],
        "category": "vendor",
        "name": "SICK AG"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK FX0-GPNT with Firmware 3.04.0",
          "product_id": "CSAFPID-0040"
        },
        "product_reference": "CSAFPID-0020",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK FX0-GPNT with Firmware 3.05.0",
          "product_id": "CSAFPID-0041"
        },
        "product_reference": "CSAFPID-0021",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ABAZ90PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0042"
        },
        "product_reference": "CSAFPID-0022",
        "relates_to_product_reference": "CSAFPID-0002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ55PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0043"
        },
        "product_reference": "CSAFPID-0023",
        "relates_to_product_reference": "CSAFPID-0003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ90PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0044"
        },
        "product_reference": "CSAFPID-0024",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ55LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0045"
        },
        "product_reference": "CSAFPID-0025",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ90LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0046"
        },
        "product_reference": "CSAFPID-0026",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ABAZ40PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0047"
        },
        "product_reference": "CSAFPID-0027",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ABAZ55PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0048"
        },
        "product_reference": "CSAFPID-0028",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ40PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0049"
        },
        "product_reference": "CSAFPID-0029",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ55PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0050"
        },
        "product_reference": "CSAFPID-0030",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CBAZ40PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0051"
        },
        "product_reference": "CSAFPID-0031",
        "relates_to_product_reference": "CSAFPID-0011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CBAZ55PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0052"
        },
        "product_reference": "CSAFPID-0032",
        "relates_to_product_reference": "CSAFPID-0012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ90PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0053"
        },
        "product_reference": "CSAFPID-0033",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CBAZ90PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0054"
        },
        "product_reference": "CSAFPID-0034",
        "relates_to_product_reference": "CSAFPID-0014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ40PZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0055"
        },
        "product_reference": "CSAFPID-0035",
        "relates_to_product_reference": "CSAFPID-0015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ55LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0056"
        },
        "product_reference": "CSAFPID-0036",
        "relates_to_product_reference": "CSAFPID-0016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ90LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0057"
        },
        "product_reference": "CSAFPID-0037",
        "relates_to_product_reference": "CSAFPID-0017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-CCAZ40LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0058"
        },
        "product_reference": "CSAFPID-0038",
        "relates_to_product_reference": "CSAFPID-0018"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MICS3-ACAZ40LZ1 with Firmware 1.23 up to 1.47",
          "product_id": "CSAFPID-0059"
        },
        "product_reference": "CSAFPID-0039",
        "relates_to_product_reference": "CSAFPID-0019"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cwe": {
        "id": "CWE-400",
        "name": "Uncontrolled Resource Consumption"
      },
      "notes": [
        {
          "category": "summary",
          "text": "The vulnerability is classified as a denial-of-service vulnerability and results form a mishandling of Read Implicit Request services. An attacker could use this vulnerability to affect the availability of the Gateway Flexi Soft and microScan3 PROFINET.\n\nEven if the SICK Gateway Flexi Soft or mircoScan3 PROFINET is made unavailable, no safety issue ensues. The main module of the gateway set its outputs in the safe state (low).\n\nIt is recommended to implement the mitigations described in the mitigations section.",
          "title": "Summary"
        }
      ],
      "product_status": {
        "known_affected": [
          "CSAFPID-0040",
          "CSAFPID-0041",
          "CSAFPID-0042",
          "CSAFPID-0043",
          "CSAFPID-0044",
          "CSAFPID-0045",
          "CSAFPID-0046",
          "CSAFPID-0047",
          "CSAFPID-0048",
          "CSAFPID-0049",
          "CSAFPID-0050",
          "CSAFPID-0051",
          "CSAFPID-0052",
          "CSAFPID-0053",
          "CSAFPID-0054",
          "CSAFPID-0055",
          "CSAFPID-0056",
          "CSAFPID-0057",
          "CSAFPID-0058",
          "CSAFPID-0059"
        ]
      },
      "remediations": [
        {
          "category": "none_available",
          "details": "Currently there is no remediation.",
          "product_ids": [
            "CSAFPID-0040",
            "CSAFPID-0041",
            "CSAFPID-0042",
            "CSAFPID-0043",
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047",
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050",
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0056",
            "CSAFPID-0057",
            "CSAFPID-0058",
            "CSAFPID-0059"
          ]
        },
        {
          "category": "mitigation",
          "details": "Please make sure that you apply general security practices when operating the SICK Flexi Soft PROFINET IO Gateway FX0-GPNT and microScan3 PROFINET. The following general security practices could mitigate the associated security risk.  ",
          "product_ids": [
            "CSAFPID-0040",
            "CSAFPID-0041",
            "CSAFPID-0042",
            "CSAFPID-0043",
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047",
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050",
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0056",
            "CSAFPID-0057",
            "CSAFPID-0058",
            "CSAFPID-0059"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0040",
            "CSAFPID-0041",
            "CSAFPID-0042",
            "CSAFPID-0043",
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047",
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050",
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0056",
            "CSAFPID-0057",
            "CSAFPID-0058",
            "CSAFPID-0059"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "An attacker that has access to one of the above listed products with the corresponding firmware versions could affect the availability by exploiting the gateway Flexi Soft or microScan3 PROFINET with a malformed PROFINET Read Implicit Request service. This forces the main module of the gateway to set its outputs in the safe state (low)."
        }
      ]
    }
  ]
}