HIGH🇵🇱 Wersja polska

CVE-2023-5246

CVSS 8.8v3.1pub. 2023-10-23upd. 2024-11-21

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
  • Sick Fx0 Gent00000

    HW
    Sick
    all versions
  • Sick Fx0 Gent00000 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gent00010

    HW
    Sick
    all versions
  • Sick Fx0 Gent00010 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gent00030

    HW
    Sick
    all versions
  • Sick Fx0 Gent00030 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gepr00000

    HW
    Sick
    all versions
  • Sick Fx0 Gepr00000 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gepr00010

    HW
    Sick
    all versions
  • Sick Fx0 Gepr00010 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Get00000

    HW
    Sick
    all versions
  • Sick Fx0 Get00000 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Get00010

    HW
    Sick
    all versions
  • Sick Fx0 Get00010 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gmod00000

    HW
    Sick
    all versions
  • Sick Fx0 Gmod00000 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gmod00010

    HW
    Sick
    all versions
  • Sick Fx0 Gmod00010 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gmod00030

    HW
    Sick
    all versions
  • Sick Fx0 Gmod00030 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gpnt00000

    HW
    Sick
    all versions
  • Sick Fx0 Gpnt00000 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gpnt00010

    HW
    Sick
    all versions
  • Sick Fx0 Gpnt00010 Firmware

    OS
    Sick
    all versions
  • Sick Fx0 Gpnt00030

    HW
    Sick
    all versions
  • Sick Fx0 Gpnt00030 Firmware

    OS
    Sick
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-23451CRITICAL9.8PL ✓same product

SICK Flexi Classic/Soft Gateways — domyślnie włączony Telnet bez hasła

CVE-2023-23452CRITICAL9.8PL ✓same product

RCE w SICK FX0-GPNT v3 — brak uwierzytelnienia dla funkcji krytycznych

CVE-2023-23453CRITICAL9.8PL ✓same product

Brak uwierzytelnienia w SICK FX0-GENT v3 umożliwia RCE przez port TCP 9000

CVE-2023-23444HIGH7.5same product

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 10...

CVE-2019-14753HIGH7.5same product

SICK FX0-GPNT00000 and FX0-GENT00000 devices through 3.4.0 have a Buffer Overflow