Vulnerability Description
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Ue410-En4 Firmware | - |
| Sick | Ue410-En4 | - |
| Sick | Ue410-En3 Firmware | - |
| Sick | Ue410-En3 | - |
| Sick | Ue410-En1 Firmware | - |
| Sick | Ue410-En1 | - |
| Sick | Fx0-Gpnt00030 Firmware | - |
| Sick | Fx0-Gpnt00030 | - |
| Sick | Fx0-Gpnt00010 Firmware | - |
| Sick | Fx0-Gpnt00010 | - |
| Sick | Fx0-Gpnt00000 Firmware | - |
| Sick | Fx0-Gpnt00000 | - |
| Sick | Fx0-Gmod00010 Firmware | - |
| Sick | Fx0-Gmod00010 | - |
| Sick | Fx0-Gmod00000 Firmware | - |
| Sick | Fx0-Gmod00000 | - |
| Sick | Fx0-Gent00030 Firmware | - |
| Sick | Fx0-Gent00030 | - |
| Sick | Fx0-Gent00010 Firmware | - |
| Sick | Fx0-Gent00010 | - |
Related Weaknesses (CWE)
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0003.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
FAQ
What is CVE-2023-23444?
CVE-2023-23444 is a vulnerability with a CVSS score of 7.5 (HIGH). Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 11...
How severe is CVE-2023-23444?
CVE-2023-23444 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-23444?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Ue410-En4 Firmware, Sick Ue410-En4, Sick Ue410-En3 Firmware, Sick Ue410-En3, Sick Ue410-En1 Firmware.