ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2023-23444

—
CVSS 3.1
8.2 high
EPSS
1%p66
Published
()
Modified
Description

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Vendors
sick
Products
ue410-en4 firmware, ue410-en3 firmware, ue410-en1 firmware, fx0-gpnt00030 firmware, fx0-gpnt00010 firmware, fx0-gpnt00000 firmware, fx0-gmod00010 firmware, fx0-gmod00000 firmware, fx0-gent00030 firmware, fx0-gent00010 firmware, fx0-gent00000 firmware
Weakness
CWE-306
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H
NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news

No ingested article mentions this CVE yet.