CVE-2023-23444

Published: May 12, 2023Modified: Jun 17, 2026

8.2

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H

Exploitability: 3.9 / Impact: 4.2

Source: NVD

Description

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Affected (11)

Products: Sick: Ue410 En4 Firmware, Ue410 En3 Firmware, Ue410 En1 Firmware, Fx0 Gpnt00030 Firmware, Fx0 Gpnt00010 Firmware, Fx0 Gpnt00000 Firmware, Fx0 Gmod00010 Firmware, Fx0 Gmod00000 Firmware, Fx0 Gent00030 Firmware, Fx0 Gent00010 Firmware, Fx0 Gent00000 Firmware

11 products

Fx0 Gpnt00030 Firmware

Fx0 Gpnt00010 Firmware

Fx0 Gpnt00000 Firmware

Fx0 Gmod00010 Firmware

Fx0 Gmod00000 Firmware

Fx0 Gent00030 Firmware

Fx0 Gent00010 Firmware

Fx0 Gent00000 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Ue410 En4 Firmware	All versions

Running on/with	Platform Versions
Sick Ue410 En4	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Ue410 En3 Firmware	All versions

Running on/with	Platform Versions
Sick Ue410 En3	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Ue410 En1 Firmware	All versions

Running on/with	Platform Versions
Sick Ue410 En1	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00030 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00030	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00010	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00000	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gmod00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gmod00010	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gmod00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gmod00000	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00030 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00030	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00010	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00000	All versions

Related CWEs

CWE-306

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (6)

https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.json

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.pdf

Source: psirt@sick.de

Vendor Advisory

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.