CVE-2023-23451

criticalPriorität · verfolgen · 39OT-Risiko · erhöhtEPSS 0.006 · 50. PerzentilDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.62% (50th) EPSS
CVSS 9.8 · critical
Is it mine?
32 products
Prüfe deine Angriffsfläche
Who says so?
4 sources
cnnvd · enisa_euvd · nvd · sick_psirt

EPSS · bewertet 2026-10-27

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration.

01

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Noch kein Hersteller-Fix; eine Mitigation ist verfügbar.

  • MitigationSICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GMOD00010 FLEXISOFT MOD GW  (C) with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

02

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

9.8
010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 3.9 · Auswirkung 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · SICK PSIRT DE
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-306USprimärCWE-477USCWE-477US
05

betroffene Produkte (32)

Betroffene Produkte und Versionsbereiche.

20 von 32 angezeigt
06

Advisories (1)

Hersteller- und Ökosystem-Meldungen dazu.

  • SCA-2023-0002Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways2023-04-11csaf · sick_psirtDE

    Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote unauthorized adversary could connect via Telnet. The adversary may use the debugging interface to subsequently gain access to the boot loader and in the worst case modify the firmware of the devices. Gateways with a serial number >2311xxxx have the Telnet interface disabled by factory default.

07

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

08

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvdenisa_euvdnvdsick_psirtNVDCVE.orgMITRE
veröffentlicht 2023-04-19geändert 2026-06-17
10

Referenzen (5)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan