CVE-2023-23444

highPriorität · verfolgen · 33OT-Risiko · erhöhtEPSS 0.012 · 67. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.17% (67th) EPSS
CVSS 8.2 · high
Is it mine?
54 products
Prüfe deine Angriffsfläche
Who says so?
3 sources
cnnvd · enisa_euvd · sick_psirt

EPSS · bewertet 2026-10-27

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; ein Workaround ist verfügbar.

  • WorkaroundSICK FX0-GENT00000 FLEXISOFT EIP GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GENT00010 FLEXISOFT EIP GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GMOD00000 FLEXISOFT MOD GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GMOD00010 FLEXISOFT MOD GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00000 FLEXISOFT PNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00010 FLEXISOFT PNET GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN1 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN3 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN4 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.2
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 4.2
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · psirt@sick.deAusnutzbarkeit 3.9 · Auswirkung 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · SICK PSIRT DE
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-306USprimärCWE-306US
05

betroffene Produkte (54)

Betroffene Produkte und Versionsbereiche.

20 von 54 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • SCA-2023-0003Vulnerability in SICK Flexi Soft and Flexi Classic Gateways2023-05-03csaf · sick_psirtDE

    SICK discovered a vulnerability in several Flexi Classic and Flexi Soft Gateways. If exploited, this potentially allows a remote unauthenticated attacker to impact the availabiltiy of the gateways. SICK is not aware of an exploit targeting this vulnerability.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdsick_psirtNVDCVE.orgMITRE
veröffentlicht 2023-05-12geändert 2026-06-17
10

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan