CVE-2023-23444

highpriority · track · 33OT risk · elevatedEPSS 0.012 · 67 %ileDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
1.17% (67th) EPSS
CVSS 8.2 · high
Is it mine?
54 products
Check your exposure
Who says so?
3 sources
cnnvd · enisa_euvd · sick_psirt

EPSS · scored 2026-10-27

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a workaround is available.

  • WorkaroundSICK FX0-GENT00000 FLEXISOFT EIP GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GENT00010 FLEXISOFT EIP GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GMOD00000 FLEXISOFT MOD GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GMOD00010 FLEXISOFT MOD GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00000 FLEXISOFT PNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00010 FLEXISOFT PNET GW (C) all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN1 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN3 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

  • WorkaroundSICK UE410-EN4 FLEXI ETHERNET GATEW. all Firmware versionssick_psirt

    Please make sure that you apply general security practices when operating the Flexi Classic and Flexi Soft Gateways like network segmentation. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

02

cvss

Technical severity, 0–10. One row per scoring source.

8.2
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.2highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 4.2
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · psirt@sick.deexploitability 3.9 · impact 3.6
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hsecondary · SICK PSIRT DE
v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: partialcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-306USprimaryCWE-306US
05

affected products (54)

Products and version ranges known to be affected.

showing 20 of 54
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • SCA-2023-0003Vulnerability in SICK Flexi Soft and Flexi Classic Gateways2023-05-03csaf · sick_psirtDE

    SICK discovered a vulnerability in several Flexi Classic and Flexi Soft Gateways. If exploited, this potentially allows a remote unauthenticated attacker to impact the availabiltiy of the gateways. SICK is not aware of an exploit targeting this vulnerability.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdsick_psirtNVDCVE.orgMITRE
published 2023-05-12modified 2026-06-17
10

references (11)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan