description: Authentication Bypass by Capture-replay in SICK Flexi Soft Gateways with Partnumbers 1044073, 1127717, 1130282, 1044074, 1121597, 1099832, 1051432, 1127487, 1069070, 1112296, 1044072, 1121596, 1099830 allows an unauthenticated remote attacker to potentially impact the availability, integrity and confidentiality of the gateways via an authentication bypass by capture-replay.
problem types: Authentication Bypass by Capture-replay
affected:
{
defaultStatus: affected
product: FX0-GMOD00000
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GMOD00010
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GMOD00030
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GPNT00000
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GPNT00010
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GPNT00030
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GETC00000
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GETC00010
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX3-GEPR00000
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX3-GEPR00010
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GENT00000
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GENT00010
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
{
defaultStatus: affected
product: FX0-GENT00030
vendor: SICK AG
versions:
status: affected, version: vers:all/*
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
workarounds: Please make sure that you apply general security practices when operating the SICK Flexi Soft Gateways. The following General Security Practices and Operating Guidelines could mitigate the associated security risk.