CVE-2023-23444: Sick FX0-GENT00000 Firmware

High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days.

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Affected products

• Sick FX0-GENT00000 Firmware: affected versions not specified
• Sick FX0-GENT00010 Firmware: affected versions not specified
• Sick FX0-GENT00030 Firmware: affected versions not specified
• Sick FX0-GMOD00000 Firmware: affected versions not specified
• Sick FX0-GMOD00010 Firmware: affected versions not specified
• Sick FX0-GPNT00000 Firmware: affected versions not specified
• Sick FX0-GPNT00010 Firmware: affected versions not specified
• Sick FX0-GPNT00030 Firmware: affected versions not specified
• Sick UE410-EN1 Firmware: affected versions not specified
• Sick UE410-EN3 Firmware: affected versions not specified
• Sick UE410-EN4 Firmware: affected versions not specified

Published 2023-05-12. Last modified 2026-06-17.