CVE-2023-23451

criticalpriority · track · 39OT risk · elevatedEPSS 0.006 · 50 %ileDEEUUS
grimoire priorityP2 · Scheduled
Exploitable?
—
no known exploitation
Likely / severe?
0.62% (50th) EPSS
CVSS 9.8 · critical
Is it mine?
32 products
Check your exposure
Who says so?
4 sources
cnnvd · enisa_euvd · nvd · sick_psirt

EPSS · scored 2026-10-27

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0, SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0, SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versions, SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versions and SICK FX0-GMOD00010 FLEXISOFT MOD GW with serial number <=2311xxxx with Firmware <=V2.11.0 all have Telnet enabled by factory default. No password is set in the default configuration.

01

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

No vendor fix yet; a mitigation is available.

  • MitigationSICK FX0-GENT00000 FLEXISOFT EIP GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GMOD00000 FLEXISOFT MOD GATEW. with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GMOD00010 FLEXISOFT MOD GW  (C) with serial number <=2311xxxx with Firmware <=V2.11.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GPNT00000 FLEXISOFT PNET GATEW. with serial number <=2311xxxx with Firmware <=V2.12.0sick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

  • MitigationSICK UE410-EN4 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versionssick_psirt

    SICK recommends to set a strong password for the Telnet protocol once the Gateway is put into operation. It is possible to set a password with a maximum length of 15 characters. Enter the following commands to change the Telnet password: ```bash $ telnet <Gateway-IP-Address> Password: <old password> [Enter] passwd <utmost secure password, followed by [Enter]> quit [Enter] $ telnet <Gateway-IP-Address> Password: <new password> [Enter] ``` Test if [Enter] still works and if the new password is saved.

02

cvss

Technical severity, 0–10. One row per scoring source.

9.8
010

base score 0–10 · higher = more severe · hover a vector to decode

v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 3.9 · impact 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondaryexploitability 3.9 · impact 5.9
v3.19.8criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hsecondary · SICK PSIRT DE
v3.19criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)
03

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: none · Automatable: yes · Technical Impact: totalcoordinatorcisa_ssvcUS
04

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-306USprimaryCWE-477USCWE-477US
05

affected products (32)

Products and version ranges known to be affected.

showing 20 of 32
06

advisories (1)

Vendor and ecosystem advisories describing this.

  • SCA-2023-0002Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways2023-04-11csaf · sick_psirtDE

    Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote unauthorized adversary could connect via Telnet. The adversary may use the debugging interface to subsequently gain access to the boot loader and in the worst case modify the firmware of the devices. Gateways with a serial number >2311xxxx have the Telnet interface disabled by factory default.

07

also known as (3)

Other names and identifiers for this entity.

08

sources

Which sources assert this record, and when.

cnnvdenisa_euvdnvdsick_psirtNVDCVE.orgMITRE
published 2023-04-19modified 2026-06-17
10

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan