CVE-2023-5246 json
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832,…
published 2023-10-23 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-57571
- cvss
- 8.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.0%
- EPSS 1.0% chance of exploitation in 30 days, percentile 63%
- public exploits
- 0
- none known
Summary
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
1.00% chance of exploitation in the next 30 days, higher than 63% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Affected products
- SICK AG FX0-GMOD00000
- SICK AG FX0-GMOD00010
- SICK AG FX0-GMOD00030
- SICK AG FX0-GPNT00000
- SICK AG FX0-GPNT00010
- SICK AG FX0-GPNT00030
- SICK AG FX0-GETC00000
- SICK AG FX0-GETC00010
- SICK AG FX3-GEPR00000
- SICK AG FX3-GEPR00010
- SICK AG FX0-GENT00000
- SICK AG FX0-GENT00010
- SICK AG FX0-GENT00030
- sick fx0-gmod00000_firmware
- sick fx0-gmod00010_firmware
- sick fx0-gmod00030_firmware
- sick fx0-gpnt00000_firmware
- sick fx0-gpnt00010_firmware
- sick fx0-gpnt00030_firmware
- sick fx0-getc00000
- sick fx0-getc00010
- sick fx3-gepr00000
- sick fx3-gepr00010
- sick fx0-gent00000_firmware
- sick fx0-gent00010_firmware
- sick fx0-gent00030_firmware
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0011.pdf
vendor-advisory, mitigation
-
sick.com
/psirt
issue-tracking, vendor-advisory
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0011.json
vendor-advisory
Sources
- CVE List CVE-2023-5246
- NVD CVE-2023-5246
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.