CVE-2023-234447.5HighCWE-306

CVE-2023-23444: SICK AG UE410-EN3 FLEXI ETHERNET GATEW. vulnerability

SICK AG · UE410-EN3 FLEXI ETHERNET GATEW.

Vendor fix available · Affected: SICK AG UE410-EN3 FLEXI ETHERNET GATEW. · Exploitation: possible (1 to 10%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

1.2%probability of exploitation in the next 30 days

67th percentile

050100

Higher than 67% of scored CVEs

7.5HighCVSS 3.1

LowMediumHighCrit.

DescriptionCVE.org

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Affected products20

From the CVE record. A product or version that is not listed is unknown, not unaffected.

SICK AG · UE410-EN3 FLEXI ETHERNET GATEW.all firmware versions
SICK AG · UE410-EN1 FLEXI ETHERNET GATEW.all firmware versions
SICK AG · UE410-EN4 FLEXI ETHERNET GATEW.all firmware versions
SICK AG · FX0-GENT00000 FLEXISOFT EIP GATEW.all firmware versions
SICK AG · FX0-GMOD00000 FLEXISOFT MOD GATEW.all firmware versions
SICK AG · FX0-GPNT00000 FLEXISOFT PNET GATEW.all firmware versions
SICK AG · FX0-GENT00030 FLEXISOFT EIP GATEW.V2all firmware versions
SICK AG · FX0-GPNT00030 FLEXISOFT PNET GATEW.V2all firmware versions
SICK AG · FX0-GMOD00010 FLEXISOFT MOD GW (C)all firmware versions
SICK AG · FX3-GEPR00000 FLEXISOFT EFI-PRO GWall firmware versions
SICK AG · FX3-GEPR00010 FLEXISOFT EFI-PRO GWall firmware versions
SICK AG · FX0-GETC00000 FLEXISOFT ETC GWall firmware versions
SICK AG · FX0-GETC00040 FLEXISOFT ETC GWall firmware versions
SICK AG · FX0-GETC00010 FLEXISOFT ETC GW (C)all firmware versions
SICK AG · FX0-GENT00010 FLEXISOFT EIP GW (C)all firmware versions
SICK AG · FX0-GPNT00010 FLEXISOFT PNET GW (C)all firmware versions
SICK AG · UE410-EN3 FLEXI ETHERNET GATEW. Firmwareall firmware versions
SICK AG · UE410-EN1 FLEXI ETHERNET GATEW. Firmwareall firmware versions
SICK AG · UE410-EN4 FLEXI ETHERNET GATEW. Firmwareall firmware versions
SICK AG · FX0-GENT00000 FLEXISOFT EIP GATEW. Firmwareall firmware versions

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Possible (1 to 10%). EPSS between 1% and 10%.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: Missing Authentication · Authentication
Vendor: SICK AG
Published: May 2023
Band: Possible (1 to 10%), May 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2023-23444 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.