CVE-2023-5246

Published Oct 23, 2023 CVSS 3.1 · 8.8 High EPSS 1.0% KEV · Not listed
Description
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

Remediation

Vendor Workaround

Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-57571 Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.
History
Type Values Removed Values Added
First Time appeared Sick fx0-getc00000
Sick fx0-getc00010
Sick fx3-gepr00000
Sick fx3-gepr00010
CPEs cpe:2.3:o:sick:fx0-getc00000:*:*:*:*:*:*:*:*
cpe:2.3:o:sick:fx0-getc00010:*:*:*:*:*:*:*:*
cpe:2.3:o:sick:fx3-gepr00000:*:*:*:*:*:*:*:*
cpe:2.3:o:sick:fx3-gepr00010:*:*:*:*:*:*:*:*
Vendors & Products Sick fx0-getc00000
Sick fx0-getc00010
Sick fx3-gepr00000
Sick fx3-gepr00010
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}