Bootloader mode vulnerability in Flexi Soft Gateways v3
The SICK PSIRT received a report about a Missing Authentication for Critical Function vulnerability in the firmware of FX0-GPNT v3 and FX0-GENT v3. This vulnerability was introduced with the hardware redesign of the v3 of FX0-GENT and FX0-GPNT as part of the implementation of the RK512 protocol. The RK512 protocol is used to configure the Flexi Soft stations via an exposed TCP port on the Ethernet based gateways.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-23453US | critical9.8OT erhöht | — | ||
Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution… | ||||
| CVE-2023-23452US | critical9.8OT erhöht | — | ||
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (8)
- WorkaroundSICK FX0-GENT00000 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00000 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00010 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00010 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00000 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00000 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00010 v3 with Firmware V3.04
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00010 v3 with Firmware V3.05
Please make sure that you apply general security practices when operating the FlexiSoft gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan