CVEvulnerability

CVE-2023-23444

8.2 HIGH Published 2023-05-12 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-05-12
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
8.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
Weaknesses
CWE-306

Description

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Affected configurations

• sick ue410-en4 firmware • sick ue410-en3 firmware • sick ue410-en1 firmware • sick fx0-gpnt00030 firmware • sick fx0-gpnt00010 firmware • sick fx0-gpnt00000 firmware • sick fx0-gmod00010 firmware • sick fx0-gmod00000 firmware • sick fx0-gent00030 firmware • sick fx0-gent00010 firmware • sick fx0-gent00000 firmware

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References