CVE-2023-23444

HIGH

SICK Flexi Classic and Flexi Soft Gateways - Unauthenticated IP Settings Manipulation via UDP Broadcast

Title source: llm
STIX 2.1

Description

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

References (3)

Core 3
Core References
Vendor Advisory issue-tracking
https://sick.com/psirt

Scores

CVSS v3 7.5
EPSS 0.0117
EPSS Percentile 63.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-306
Status published
Products (43)
sick/fx0-gent00000_firmware
sick/fx0-gent00010_firmware
sick/fx0-gent00030_firmware
sick/fx0-gmod00000_firmware
sick/fx0-gmod00010_firmware
sick/fx0-gpnt00000_firmware
sick/fx0-gpnt00010_firmware
sick/fx0-gpnt00030_firmware
sick/ue410-en1_firmware
sick/ue410-en3_firmware
... and 33 more
Published May 12, 2023
Tracked Since Feb 18, 2026