CVE-2023-5246
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832,…
- Published
- Updated
- Reserved
- Assigned by
- SICK AG
Description
Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| SICK AGCNA (assigner) | 3.1 | High8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
| NVDNVD · Modified | 3.1 | High8.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
- EPSS (exploitation in 30 days)
- 1.0% · top 37% of all CVEs (7 Nov 2026)
- CISA SSVC
- Exploitation: none · Automatable: no · Technical impact: total
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.
Weakness
- Authentication Bypass by Capture-replay
- CWE-287 (opens in a new tab)All about CWE-287 and its CVEs
Affected products
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
- affected vers:all/*
What to do
Workaround: Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.
References (3)
- https://sick.com/psirt (opens in a new tab)issue-trackingx_transferred
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdf (opens in a new tab)vendor-advisoryx_transferred
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.json (opens in a new tab)x_csafx_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2023-5246)Record last updated .