Lucene search
+L

681 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/04/19 12:00 a.m.•5 views

CVE-2023-23451: Use of Obsolete Function

The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with serial number =2311xxxx all Firmware versions, SICK UE410-EN3S04 FLEXI ETHERNET GATEW. with serial number =2311xxxx all...

9.8CVSS5.8AI score0.00621EPSS
SaveExploits0References3
Sick AG
Sick AG
•added 2023/04/11 10:00 a.m.•29 views

Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways

Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration. If the password is not set by the customer, a remote...

9.8CVSS7.2AI score0.00621EPSS
SaveExploits0
OSV
OSV
•added 2023/02/20 11:15 p.m.•21 views

CVE-2023-23452

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS7.9AI score0.01098EPSS
SaveExploits0References1
OSV
OSV
•added 2023/02/20 11:15 p.m.•15 views

CVE-2023-23453

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS7.9AI score0.01098EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/20 11:15 p.m.•32 views

CVE-2023-23452

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS9.9AI score0.01098EPSS
SaveExploits0References1
NVD
NVD
•added 2023/02/20 11:15 p.m.•30 views

CVE-2023-23453

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS9.9AI score0.01098EPSS
SaveExploits0References1
Prion
Prion
•added 2023/02/20 11:15 p.m.•26 views

Authentication flaw

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

7.5CVSS9.8AI score0.01098EPSS
SaveExploits0References1Affected Software2
Prion
Prion
•added 2023/02/20 11:15 p.m.•27 views

Authentication flaw

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

7.5CVSS9.8AI score0.01098EPSS
SaveExploits0References1Affected Software2
CNNVD
CNNVD
•added 2023/02/20 12:00 a.m.•16 views

SICK FX0-GPNT 访问控制错误漏洞

The SICK FX0-GPNT00000 is a safety control module from SICK with a built-in Ethernet switch. A security vulnerability exists in the SICK FX0-GPNT v3 Firmware version V3.04, V3.05, which stems from a lack of authentication for critical functions. The vulnerability can be exploited by an attacker t...

9.8CVSS9.4AI score0.01098EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2023/02/20 12:00 a.m.•40 views

CVE-2023-23452

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

10AI score0.01098EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2023/02/20 12:00 a.m.•43 views

CVE-2023-23453

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

10AI score0.01098EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/02/20 12:00 a.m.•12 views

CVE-2023-23453

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

8.2AI score0.01098EPSS
SaveExploits0References1
CVE
CVE
•added 2023/02/20 12:00 a.m.•78 views

CVE-2023-23452

The CVE-2023-23452 entry concerns SICK FX0-GPNT v3 firmware (V3.04/V3.05) missing authentication for critical function, enabling an unprivileged remote attacker to execute arbitrary code via crafted RK512 commands to a listener on TCP port 9000. Affected product context is the FX0-GPNT gateway/GA...

9.8CVSS9.8AI score0.01098EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2023/02/20 12:00 a.m.•3 views

PT-2023-18963

Name of the Vulnerable Software and Affected Versions SICK FX0-GENT v3 Firmware versions V3.04 and V3.05 Description The issue allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000. This is due to...

9.8CVSS0.01098EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
•added 2023/02/20 12:00 a.m.•3 views

PT-2023-18962

Name of the Vulnerable Software and Affected Versions SICK FX0-GPNT v3 Firmware version V3.04 SICK FX0-GPNT v3 Firmware version V3.05 Description The issue allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on T...

9.8CVSS0.01098EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/20 12:00 a.m.•6 views

CVE-2023-23452: Missing Authentication for Critical Function

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS6.4AI score0.01098EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/02/20 12:00 a.m.•5 views

CVE-2023-23453: Missing Authentication for Critical Function

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

9.8CVSS6.4AI score0.01098EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2023/02/20 12:00 a.m.•20 views

SICK FX0-GENT 访问控制错误漏洞

The SICK FX0-GENT is a safety system for AGVs and AMRs from SICK Germany. A security vulnerability exists in SICK FX0-GENT v3 Firmware version V3.04, V3.05, which stems from a lack of authentication for critical functions. An attacker can exploit this vulnerability to achieve arbitrary remote cod...

9.8CVSS9.4AI score0.01098EPSS
SaveExploits0References2
CVE
CVE
•added 2023/02/20 12:00 a.m.•81 views

CVE-2023-23453

Affected: SICK FX0-GENT v3 firmware (V3.04 and V3.05). Vulnerability: Missing authentication for a critical function allows an unprivileged remote attacker to execute arbitrary code via crafted RK512 commands sent to the listener on TCP port 9000. Root cause: lack of authentication for critical f...

9.8CVSS9.8AI score0.01098EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/02/20 12:00 a.m.•13 views

CVE-2023-23452

Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000...

8.2AI score0.01098EPSS
SaveExploits0References1
Rows per page
Query Builder