← Back

CVE-2023-23451

nvd nist
Published: Apr 19, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration.

Affected (10)

Sick
10 products
Ue410 En3 Firmware
Ue410 En1 Firmware
Ue410 En3s04 Firmware
Ue410 En4 Firmware
Fx0 Gent00000 Firmware
Fx0 Gmod00000 Firmware
Fx0 Gpnt00000 Firmware
Fx0 Gent00030 Firmware
Fx0 Gpnt00030 Firmware
Fx0 Gmod00010 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ue410 En3 Firmware
All versions
Running on/withPlatform Versions
Sick
Ue410 En3
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ue410 En1 Firmware
All versions
Running on/withPlatform Versions
Sick
Ue410 En1
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ue410 En3s04 Firmware
All versions
Running on/withPlatform Versions
Sick
Ue410 En3s04
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ue410 En4 Firmware
All versions
Running on/withPlatform Versions
Sick
Ue410 En4
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gent00000 Firmware
Up to 2.11.0
Running on/withPlatform Versions
Sick
Fx0 Gent00000
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gmod00000 Firmware
Up to 2.11.0
Running on/withPlatform Versions
Sick
Fx0 Gmod00000
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gpnt00000 Firmware
Up to 2.12.0
Running on/withPlatform Versions
Sick
Fx0 Gpnt00000
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gent00030 Firmware
All versions
Running on/withPlatform Versions
Sick
Fx0 Gent00030
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gpnt00030 Firmware
All versions
Running on/withPlatform Versions
Sick
Fx0 Gpnt00030
All versions
Configuration J
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Fx0 Gmod00010 Firmware
Up to 2.11.0
Running on/withPlatform Versions
Sick
Fx0 Gmod00010
All versions

Related CWEs

CWE-306
Missing Authentication for Critical Function
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
CWE-477
Use of Obsolete Function
The code uses deprecated or obsolete functions, which suggests that the code has not been actively reviewed or maintained.

References (2)

Source: psirt@sick.de
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.