CVE-2023-23453

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Missing Authentication for Critical Function in SICK FX0-GENT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published: Feb 20, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-234545.5cbq_classify in net/sched/sch_cbq.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service (slab-out-of-bounds read CVE-2023-234555.5atm_tc_enqueue in net/sched/sch_atm.c in the Linux kernel through 6.1.4 allows attackers to cause a denial of service because of type confus CVE-2023-234565.5A heap-based buffer overflow issue was discovered in UPX in PackTmt::pack() in p_tmt.cpp file. The flow allows an attacker to cause a denial CVE-2023-234575.5A Segmentation fault was found in UPX in PackLinuxElf64::invert_pt_dynamic() in p_lx_elf.cpp. An attacker with a crafted input file allows i CVE-2023-234586.5Sunell DVR, latest version, CWE-200: Exposure of Sensitive Information to an Unauthorized Actor through an unspecified request.CVE-2023-234599.8Priority Windows may allow Command Execution via SQL Injection using an unspecified method.CVE-2023-23469.8A vulnerability was found in SourceCodester Service Provider Management System 1.0. It has been classified as critical. This affects an unkn CVE-2023-234609.8Priority Web version 19.1.0.68, parameter manipulation on an unspecified end-point may allow authentication bypass.CVE-2023-234619.8Libpeconv – access violation, before commit b076013 (30/11/2022).CVE-2023-234629.8Libpeconv – integer overflow, before commit 75b1565 (30/11/2022).CVE-2023-234637.5Sunell DVR, latest version, Insufficiently Protected Credentials (CWE-522) may be exposed through an unspecified request.CVE-2023-234647.5Media CP Media Control Panel latest version. A Permissive Flash Cross-domain Policy may allow information disclosure.