Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways
Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote unauthorized adversary could connect via Telnet. The adversary may use the debugging interface to subsequently gain access to the boot loader and in the worst case modify the firmware of the devices. Gateways with a serial number >2311xxxx have the Telnet interface disabled by factory default.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-23451US | critical9.8OT elevated | — | ||
The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial… | ||||
references
External citations — patches, advisories, analysis.
remediations (10)
- MitigationSICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK FX0-GMOD00010 FLEXISOFT MOD GW (C) with serial number <=2311xxxx with Firmware <=V2.11.0
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
- MitigationSICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions
SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan