CVE Feed

    Dashboard / CVE / CVE-2023-5246

    CVE-2023-5246

    Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

    Published:Oct 23, 2023
    Last Modified:Jun 1, 2026
    EPS:Oct 23, 2023
    EPSS Score:0.01589
    CVSS Score:8.8

    Affected Products

    Vendor
    Sick
    Product
    Fx0-gent00000
    Vendor
    Sick
    Product
    Fx0-gent00000 Firmware
    Vendor
    Sick
    Product
    Fx0-gent00010
    Vendor
    Sick
    Product
    Fx0-gent00010 Firmware
    Vendor
    Sick
    Product
    Fx0-gent00030
    Vendor
    Sick
    Product
    Fx0-gent00030 Firmware
    Vendor
    Sick
    Product
    Fx0-gepr00000
    Vendor
    Sick
    Product
    Fx0-gepr00000 Firmware
    Vendor
    Sick
    Product
    Fx0-gepr00010
    Vendor
    Sick
    Product
    Fx0-gepr00010 Firmware
    Vendor
    Sick
    Product
    Fx0-get00000
    Vendor
    Sick
    Product
    Fx0-get00000 Firmware
    Vendor
    Sick
    Product
    Fx0-get00010
    Vendor
    Sick
    Product
    Fx0-get00010 Firmware
    Vendor
    Sick
    Product
    Fx0-getc00000
    Vendor
    Sick
    Product
    Fx0-getc00010
    Vendor
    Sick
    Product
    Fx0-gmod00000
    Vendor
    Sick
    Product
    Fx0-gmod00000 Firmware
    Vendor
    Sick
    Product
    Fx0-gmod00010
    Vendor
    Sick
    Product
    Fx0-gmod00010 Firmware
    Vendor
    Sick
    Product
    Fx0-gmod00030
    Vendor
    Sick
    Product
    Fx0-gmod00030 Firmware
    Vendor
    Sick
    Product
    Fx0-gpnt00000
    Vendor
    Sick
    Product
    Fx0-gpnt00000 Firmware
    Vendor
    Sick
    Product
    Fx0-gpnt00010
    Vendor
    Sick
    Product
    Fx0-gpnt00010 Firmware
    Vendor
    Sick
    Product
    Fx0-gpnt00030
    Vendor
    Sick
    Product
    Fx0-gpnt00030 Firmware
    Vendor
    Sick
    Product
    Fx3-gepr00000
    Vendor
    Sick
    Product
    Fx3-gepr00010

    Exploits

    No exploit reference

    Common Weakness Enumeration

    CWE-287 Improper Authentication

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High