How severe is CVE-2023-23444?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.2 out of 10.

What type of vulnerability is CVE-2023-23444?

This is classified as CWE-306, which is a common weakness in software security.

CVE-2023-23444 - HIGH Severity | CVSS 8.2

Vulnerability Description

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to influence the availability of the device by changing the IP settings of the device via broadcasted UDP packets.

Related Vulnerabilities

CVE-2019-12105

HIGH

CVSS:8.2(High)

In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default bu...

CWE-3062019

CVE-2019-17353

HIGH

CVSS:8.2(High)

An issue discovered on D-Link DIR-615 devices with firmware version 20.05 and 20.07. wan.htm can be accessed directly without authentication, which can lead to disclosure of information about the WAN,...

CWE-3062019

CVE-2019-6820

HIGH

CVSS:8.2(High)

A CWE-306: Missing Authentication for Critical Function vulnerability exists which could cause a modification of device IP configuration (IP address, network mask and gateway IP address) when a specif...

CWE-3062019

CVE-2021-27963

HIGH

CVSS:8.2(High)

SonLogger before 6.4.1 is affected by user creation with any user permissions profile (e.g., SuperAdmin). An anonymous user can send a POST request to /User/saveUser without any authentication or sess...

CWE-3062021

CVE-2022-34321

HIGH

CVSS:8.2(High)

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics abou...

CWE-3062022

CVE-2023-46381

HIGH

CVSS:8.2(High)

LOYTEC LINX-151, LINX-212, LVIS-3ME12-A1, LIOB-586, LIOB-580 V2, LIOB-588, L-INX Configurator devices (all versions) lack authentication for the preinstalled version of LWEB-802 via an lweb802_pre/ UR...

CWE-3062023