CVE-2023-5246
highPriorität · verfolgen · 35OT-Risiko · erhöhtEPSS 0.010 · 63. PerzentilDEEUUSEPSS · bewertet 2026-10-27
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Noch kein Hersteller-Fix; ein Workaround ist verfügbar.
- WorkaroundSICK FX0-GENT00000 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00010 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GENT00030 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GETC00000 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GETC00010 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GMOD00000 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GMOD00010 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GMOD00030 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00000 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00010 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX0-GPNT00030 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX3-GEPR00000 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
- WorkaroundSICK FX3-GEPR00010 all Firmware versionssick_psirt
Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (39)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- SCA-2023-0011Vulnerability in multiple SICK Flexi Soft Gateways2023-10-23csaf · sick_psirtDE
The SICK PSIRT received a report about a vulnerability in several Flexi Soft Gateways that could allow an attacker to login to the gateways by sending specially crafted packets and potentially impact the availabilty, integrity and confidentiality of the devices. SICK recommends making sure to run the product in a secure environment. SICK is not aware of an exploit targeting this vulnerability.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (11)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2023-5246/cnnvd
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.jsoncnnvd
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdfcnnvd
- https://sick.com/psirtcnnvd
- https://www.sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdfPatchcnnvd
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.jsonenisa_euvd
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdfenisa_euvd
- https://sick.com/psirtenisa_euvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan