CVE-2023-23451

Name of the Vulnerable Software and Affected Versions SICK UE410-EN3 FLEXI ETHERNET GATEW. versions all SICK UE410-EN1 FLEXI ETHERNET GATEW. versions all SICK UE410-EN3S04 FLEXI ETHERNET GATEW. versions all SICK UE410-EN4 FLEXI ETHERNET GATEW. versions all SICK FX0-GENT00000 FLEXISOFT EIP GATEW. versions prior to V2.11.0 SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. versions prior to V2.11.0 SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. versions prior to V2.12.0 SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2 versions all SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 versions all SICK FX0-GMOD00010 FLEXISOFT MOD GW versions prior to V2.11.0

Description The issue is related to the default configuration of the Telnet interface in the affected gateways, which is enabled by factory default and has no password set. This could potentially allow unauthorized access to the devices. Gateways with a serial number greater than 2311xxxx have the Telnet interface disabled by factory default.

Recommendations For SICK UE410-EN3 FLEXI ETHERNET GATEW., consider disabling the Telnet interface until a patch is available. For SICK UE410-EN1 FLEXI ETHERNET GATEW., consider disabling the Telnet interface until a patch is available. For SICK UE410-EN3S04 FLEXI ETHERNET GATEW., consider disabling the Telnet interface until a patch is available. For SICK UE410-EN4 FLEXI ETHERNET GATEW., consider disabling the Telnet interface until a patch is available. For SICK FX0-GENT00000 FLEXISOFT EIP GATEW. versions prior to V2.11.0, consider disabling the Telnet interface until a patch is available. For SICK FX0-GMOD00000 FLEXISOFT MOD GATEW. versions prior to V2.11.0, consider disabling the Telnet interface until a patch is available. For SICK FX0-GPNT00000 FLEXISOFT PNET GATEW. versions prior to V2.12.0, consider disabling the Telnet interface until a patch is available. For SICK FX0-GENT00030 FLEXISOFT EIP GATEW.V2, consider disabling the Telnet interface until a patch is available. For SICK FX0-GPNT00030 FLEXISOFT PNET GATEW.V2, consider disabling the Telnet interface until a patch is available. For SICK FX0-GMOD00010 FLEXISOFT MOD GW versions prior to V2.11.0, consider disabling the Telnet interface until a patch is available.