CVE-2023-5246

Published: Oct 23, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

Affected (13)

Products: Sick: Fx0 Gent00000 Firmware, Fx0 Gent00010 Firmware, Fx0 Gent00030 Firmware, Fx0 Get00000 Firmware, Fx0 Get00010 Firmware, Fx0 Gmod00000 Firmware, Fx0 Gmod00010 Firmware, Fx0 Gmod00030 Firmware, Fx0 Gpnt00000 Firmware, Fx0 Gpnt00010 Firmware, Fx0 Gpnt00030 Firmware, Fx0 Gepr00000 Firmware, Fx0 Gepr00010 Firmware

Sick

13 products

Fx0 Gent00000 Firmware

Fx0 Gent00010 Firmware

Fx0 Gent00030 Firmware

Fx0 Get00000 Firmware

Fx0 Get00010 Firmware

Fx0 Gmod00000 Firmware

Fx0 Gmod00010 Firmware

Fx0 Gmod00030 Firmware

Fx0 Gpnt00000 Firmware

Fx0 Gpnt00010 Firmware

Fx0 Gpnt00030 Firmware

Fx0 Gepr00000 Firmware

Fx0 Gepr00010 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00000	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00010	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gent00030 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gent00030	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Get00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Get00000	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Get00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Get00010	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gmod00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gmod00000	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gmod00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gmod00010	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gmod00030 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gmod00030	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00000	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00010	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gpnt00030 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gpnt00030	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gepr00000 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gepr00000	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Fx0 Gepr00010 Firmware	All versions

Running on/with	Platform Versions
Sick Fx0 Gepr00010	All versions

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (6)

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.json

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdf

Source: psirt@sick.de

MitigationVendor Advisory

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

MitigationVendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.