Lucene search

[email protected]CVE-2023-5246

HistoryOct 23, 2023 - 1:15 p.m.

CVE-2023-5246

2023-10-2313:15:09

CWE-287

[email protected]

web.nvd.nist.gov

cve-2023-5246

authentication bypass

capture-replay

sick flexi soft gateways

partnumbers

security vulnerability

nvd

remote attack

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

JSON

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

Affected configurations

NVD

Node

sickfx0-gent00000Match-

AND

sickfx0-gent00000_firmwareMatch-

Node

sickfx0-gent00010Match-

AND

sickfx0-gent00010_firmwareMatch-

Node

sickfx0-gent00030Match-

AND

sickfx0-gent00030_firmwareMatch-

Node

sickfx0-get00000Match-

AND

sickfx0-get00000_firmwareMatch-

Node

sickfx0-get00010Match-

AND

sickfx0-get00010_firmwareMatch-

Node

sickfx0-gmod00000Match-

AND

sickfx0-gmod00000_firmwareMatch-

Node

sickfx0-gmod00010Match-

AND

sickfx0-gmod00010_firmwareMatch-

Node

sickfx0-gmod00030Match-

AND

sickfx0-gmod00030_firmwareMatch-

Node

sickfx0-gpnt00000_firmwareMatch-

AND

sickfx0-gpnt00000Match-

Node

sickfx0-gpnt00010_firmwareMatch-

AND

sickfx0-gpnt00010Match-

Node

sickfx0-gpnt00030_firmwareMatch-

AND

sickfx0-gpnt00030Match-

Node

sickfx0-gepr00000_firmwareMatch-

AND

sickfx0-gepr00000Match-

Node

sickfx0-gepr00010_firmwareMatch-

AND

sickfx0-gepr00010Match-

CPENameOperatorVersion
sick:fx0-gent00000_firmwaresick fx0-gent00000 firmwareeq-

CPE	Name	Operator	Version
sick:fx0-gent00000_firmware	sick fx0-gent00000 firmware	eq	-

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "FX0-GMOD00000",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GMOD00010",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GMOD00030",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GPNT00000",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GPNT00010",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GPNT00030",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GETC00000",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GETC00010",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX3-GEPR00000",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX3-GEPR00010",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GENT00000",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GENT00010",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  },
  {
    "defaultStatus": "affected",
    "product": "FX0-GENT00030",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "vers:all/*"
      }
    ]
  }
]

References

sick.com/.well-known/csaf/white/2023/sca-2023-0011.json

sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdf

sick.com/psirt

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.5%

JSON

Related for CVE-2023-5246

prion1 nvd1 cvelist1