{"id":"CVE-2025-32472","state":"PUBLISHED","title":"DoS attack by conducting a slowloris-type attack","description":"The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive.","publishedAt":"2025-04-28T12:04:55.012Z","updatedAt":"2025-04-28T16:30:57.990Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","source":"SICK AG"},"assigner":"SICK AG","products":["SICK AG SICK multiScan1XX","SICK AG SICK picoScan1XX"],"affected":[{"vendor":"SICK AG","product":"SICK multiScan1XX","defaultStatus":"affected","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"SICK AG","product":"SICK picoScan1XX","defaultStatus":"affected","versions":[{"version":"all versions","status":"affected"}]}],"references":["https://sick.com/psirt","https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF","https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","https://www.first.org/cvss/calculator/3.1","https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0006.pdf","https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0006.json"],"weaknesses":["CWE-400"],"ingestedAt":"2026-10-29T20:08:55.257Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2025/32xxx/CVE-2025-32472.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2025-32472","state":"PUBLISHED","datePublished":"2025-04-28T12:04:55.012Z","dateUpdated":"2025-04-28T16:30:57.990Z","assignerShortName":"SICK AG","assignerOrgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","dateReserved":"2025-04-09T07:42:18.369Z"},"containers":{"cna":{"title":"DoS attack by conducting a slowloris-type attack","descriptions":[{"lang":"en","value":"The multiScan and picoScan are vulnerable to a denial-of-service (DoS) attack. A remote attacker can exploit this vulnerability by conducting a Slowloris-type attack, causing the web page to become unresponsive."}],"affected":[{"vendor":"SICK AG","product":"SICK multiScan1XX","defaultStatus":"affected","versions":[{"version":"all versions","status":"affected"}]},{"vendor":"SICK AG","product":"SICK picoScan1XX","defaultStatus":"affected","versions":[{"version":"all versions","status":"affected"}]}],"references":[{"url":"https://sick.com/psirt","tags":["x_SICK PSIRT Website"]},{"url":"https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF","tags":["x_SICK Operating Guidelines"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT"]},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0006.pdf","tags":["vendor-advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0006.json","tags":["vendor-advisory","x_csaf"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":5.3,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-400","description":"CWE-400 (Uncontrolled Resource Consumption)","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"SICK AG","orgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","dateUpdated":"2025-04-28T12:04:55.012Z"},"datePublic":"2025-04-28T11:00:00.000Z","source":{"advisory":"SCA-2025-0006","discovery":"INTERNAL"},"workarounds":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices. Additionally, the web server can be disabled via the CyberSecurity page in the UI.<br>"}],"value":"Please make sure that only trusted entities have access to the device. Furthermore, you should apply the following General Security Measures when operating the product to mitigate the associated security risk. The collected resources ”SICK Operating Guidelines” and ”ICS-CERT recommended practices on Industrial Security” could help to implement the general security practices. Additionally, the web server can be disabled via the CyberSecurity page in the UI."}],"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-28T15:46:12.243243Z","id":"CVE-2025-32472","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-28T16:30:57.990Z"}}]}}}