CVE-2023-23452

CVSS V2 None CVSS V3 None
Description
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
Overview
  • CVE ID
  • CVE-2023-23452
  • Assigner
  • psirt@sick.de
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-02-20T23:15:12
  • Last Modified Date
  • 2023-03-02T17:02:30
Weakness Enumerations
CWE URL
CWE-306 http://cwe.mitre.org/data/definitions/306.html
CWE-306 http://cwe.mitre.org/data/definitions/306.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:o:sick:fx0-gpnt00000_firmware:3.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:sick:fx0-gpnt00000_firmware:3.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:sick:fx0-gpnt00000:-:*:*:*:*:*:*:* 0 OR
AND
cpe:2.3:o:sick:fx0-gpnt00010_firmware:3.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:sick:fx0-gpnt00010_firmware:3.05:*:*:*:*:*:*:* 1 OR
cpe:2.3:h:sick:fx0-gpnt00010:-:*:*:*:*:*:*:* 0 OR
References
Reference URL Reference Tags
https://sick.com/psirt Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-23452
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23452
History
Created Old Value New Value Data Type Notes
2023-04-17 08:00:31 Added to TrackCVE
2023-04-17 08:00:34 Weakness Enumeration new