Search/CVE-2023-23444
● CVE — High

CVE-2023-23444

VendorsickProductfx0-gent00000 firmware, fx0-gpnt00000 firmware, fx0-gpnt00010 firmware, fx0-gent00010 firmware, fx0-gent00030 firmware, fx0-gmod00000 firmware, fx0-gmod00010 firmware, fx0-gpnt00030 firmware, ue410-en1 firmware, ue410-en3 firmware, ue410-en4 firmwareDiscoveredMay 12, 2023UpdatedJan 24, 2025

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

View graph Watch Export
CVSS v3.1
7.5 HIGH
EPSS
1.17%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
ScopeUNCHANGED
ConfidentialityNONE
IntegrityNONE
AvailabilityHIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Connections
12 relationships
Timeline
disclosure → media coverage
May 12, 2023
Disclosure — published as a CVE record. · last revised by NVD Jan 24, 2025