Bootloader mode vulnerability in Flexi Soft Gateways v3
The SICK PSIRT received a report about a Missing Authentication for Critical Function vulnerability in the firmware of FX0-GPNT v3 and FX0-GENT v3. This vulnerability was introduced with the hardware redesign of the v3 of FX0-GENT and FX0-GPNT as part of the implementation of the RK512 protocol. The RK512 protocol is used to configure the Flexi Soft stations via an exposed TCP port on the Ethernet based gateways.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-23453US | critical9.8OT elevated | — | ||
Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution… | ||||
| CVE-2023-23452US | critical9.8OT elevated | — | ||
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution… | ||||
references
External citations — patches, advisories, analysis.
remediations (8)
- WorkaroundSICK FX0-GENT00000 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00000 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00010 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00010 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00000 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00000 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00010 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00010 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan