Description
Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
Published: 2023-02-20
Score: 9.8 Critical
EPSS: 2.1% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No vendor fix or workaround currently provided.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-27553 Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
References
Link Providers
https://sick.com/psirt cve-icon cve-icon
History

Tue, 18 Mar 2025 15:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Subscriptions

Sick Fx0-gent00000 Fx0-gent00000 Firmware Fx0-gent00010 Fx0-gent00010 Firmware
cve-icon MITRE

Status: PUBLISHED

Assigner: SICK AG

Published:

Updated: 2025-03-18T15:01:59.836Z

Reserved: 2023-01-12T00:00:00.000Z

Link: CVE-2023-23453

cve-icon Vulnrichment

Updated: 2024-08-02T10:28:41.043Z

cve-icon NVD

Status : Modified

Published: 2023-02-20T23:15:12.517

Modified: 2025-03-18T15:15:44.323

Link: CVE-2023-23453

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses