CVE-2023-23444
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with...
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
- Record
CVE-2023-23444- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
EUVDEUVD-2023-27544
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
- Record
EUVD-2023-27544- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-8w5h-774q-3rhm
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with...
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
- Record
GHSA-8w5h-774q-3rhm- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
NVD
Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.
- Record
CVE-2023-23444- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 3.1
- 8.2 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H - Weakness
- CWE-306
- Updated
- 2026-11-02
Affected products
- sick fx0-gent00000 firmware
- sick fx0-gent00010 firmware
- sick fx0-gent00030 firmware
- sick fx0-gmod00000 firmware
- sick fx0-gmod00010 firmware
- sick fx0-gpnt00000 firmware
- sick fx0-gpnt00010 firmware
- sick fx0-gpnt00030 firmware
- sick ue410-en1 firmware
- sick ue410-en3 firmware
- sick ue410-en4 firmware
- sick ag fx0-gent00000 flexisoft eip gatew.
Show 31 moreShow less
- sick ag fx0-gent00000 flexisoft eip gatew. firmware
- sick ag fx0-gent00010 flexisoft eip gw (c)
- sick ag fx0-gent00010 flexisoft eip gw (c) firmware
- sick ag fx0-gent00030 flexisoft eip gatew.v2
- sick ag fx0-gent00030 flexisoft eip gatew.v2 firmware
- sick ag fx0-getc00000 flexisoft etc gw
- sick ag fx0-getc00000 flexisoft etc gw firmware
- sick ag fx0-getc00010 flexisoft etc gw (c)
- sick ag fx0-getc00010 flexisoft etc gw (c) firmware
- sick ag fx0-getc00040 flexisoft etc gw
- sick ag fx0-getc00040 flexisoft etc gw firmware
- sick ag fx0-gmod00000 flexisoft mod gatew.
- sick ag fx0-gmod00000 flexisoft mod gatew. firmware
- sick ag fx0-gmod00010 flexisoft mod gw (c)
- sick ag fx0-gmod00010 flexisoft mod gw (c) firmware
- sick ag fx0-gpnt00000 flexisoft pnet gatew.
- sick ag fx0-gpnt00000 flexisoft pnet gatew. firmware
- sick ag fx0-gpnt00010 flexisoft pnet gw (c)
- sick ag fx0-gpnt00010 flexisoft pnet gw (c) firmware
- sick ag fx0-gpnt00030 flexisoft pnet gatew.v2
- sick ag fx0-gpnt00030 flexisoft pnet gatew.v2 firmware
- sick ag fx3-gepr00000 flexisoft efi-pro gw
- sick ag fx3-gepr00000 flexisoft efi-pro gw firmware
- sick ag fx3-gepr00010 flexisoft efi-pro gw
- sick ag fx3-gepr00010 flexisoft efi-pro gw firmware
- sick ag ue410-en1 flexi ethernet gatew.
- sick ag ue410-en1 flexi ethernet gatew. firmware
- sick ag ue410-en3 flexi ethernet gatew.
- sick ag ue410-en3 flexi ethernet gatew. firmware
- sick ag ue410-en4 flexi ethernet gatew.
- sick ag ue410-en4 flexi ethernet gatew. firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-23444 is a high vulnerability (CVSS 7.5) in Sick Fx0-gent00000 Firmware, published May 12, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.17%, the 67th percentile. No source names a fixed version.