CVE-2023-5246

State: Published
Severity: 8.8 High
Published: Oct 23, 2023
Updated: Jun 1, 2026
Reserved: Sep 28, 2023

Description

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

Scores

CVSS	Score	Vector	Source
3.1	8.8 High	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H	SICK AG

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
FX0-GMOD00000SICK AG	vers:all/*Affected
FX0-GMOD00010SICK AG	vers:all/*Affected
FX0-GMOD00030SICK AG	vers:all/*Affected
FX0-GPNT00000SICK AG	vers:all/*Affected
FX0-GPNT00010SICK AG	vers:all/*Affected
FX0-GPNT00030SICK AG	vers:all/*Affected
FX0-GETC00000SICK AG	vers:all/*Affected
FX0-GETC00010SICK AG	vers:all/*Affected
FX3-GEPR00000SICK AG	vers:all/*Affected
FX3-GEPR00010SICK AG	vers:all/*Affected
FX0-GENT00000SICK AG	vers:all/*Affected
FX0-GENT00010SICK AG	vers:all/*Affected
FX0-GENT00030SICK AG	vers:all/*Affected

References

https://sick.com/psirtissue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdfvendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.json

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.