CVE-2023-5246

high

Description

Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.

References

https://sick.com/psirt

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.pdf

https://sick.com/.well-known/csaf/white/2023/sca-2023-0011.json

Details

Source: Mitre, NVD

Published: 2023-10-23

Updated: 2023-10-31

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 8.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Severity: High