Skip to content
OpenAdvisories
Critical SCA-2023-0002 1 CVE

Use of Telnet in multiple SICK Flexi Soft and Flexi Classic Gateways

Published Apr 11, 2023 · Updated Apr 11, 2023 · Revision 2

Vendor: SICK Product: FX0-GENT00000 FLEXISOFT EIP GATEW. Product: FX0-GENT00000 FLEXISOFT EIP GATEW. Firmware Product: FX0-GENT00030 FLEXISOFT EIP GATEW.V2 Product: FX0-GENT00030 FLEXISOFT EIP GATEW.V2 Firmware Product: FX0-GMOD00000 FLEXISOFT MOD GATEW. Product: FX0-GMOD00000 FLEXISOFT MOD GATEW. Firmware Product: FX0-GMOD00010 FLEXISOFT MOD GW (C) Product: FX0-GMOD00010 FLEXISOFT MOD GW (C) Firmware Product: FX0-GPNT00000 FLEXISOFT PNET GATEW. Product: FX0-GPNT00000 FLEXISOFT PNET GATEW. Firmware Product: FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 Product: FX0-GPNT00030 FLEXISOFT PNET GATEW.V2 Firmware Product: UE410-EN1 FLEXI ETHERNET GATEW. Product: UE410-EN1 FLEXI ETHERNET GATEW. Firmware Product: UE410-EN3 FLEXI ETHERNET GATEW. Product: UE410-EN3 FLEXI ETHERNET GATEW. Firmware Product: UE410-EN3S04 FLEXI ETHERNET GATEW. Product: UE410-EN3S04 FLEXI ETHERNET GATEW. Firmware Product: UE410-EN4 FLEXI ETHERNET GATEW. Product: UE410-EN4 FLEXI ETHERNET GATEW. Firmware

Summary

Several versions of the SICK Flexi Soft Gateways FX0-GENT, FX0-GMOD, FX0-GPNT and SICK Flexi Classic Gateway UE410 provide a Telnet interface for debugging, which is enabled by factory default. No password is set in the default configuration.

If the password is not set by the customer, a remote unauthorized adversary could connect via Telnet. The adversary may use the debugging interface to subsequently gain access to the boot loader and in the worst case modify the firmware of the devices.

Gateways with a serial number >2311xxxx have the Telnet interface disabled by factory default.

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-23451

    The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmwa…

Revision history

  1. #2

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #1

    Initial Release

References