CVE-2023-23452
Quick assessment
Affected
n/a FX0-GPNT v3 Firmware
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SICK FX0-GPNT00000是德国西克（SICK）公司的一款内置了以太网交换机的安全控制模块。 SICK FX0-GPNT v3 Firmware V3.04版本、V3.05版本存在安全漏洞，该漏洞源于缺少对关键功能的身份验证。攻击者利用该漏洞通过恶意制作的 RK512 命令对 TCP 端口 9000 上的侦听器实现任意远程代码执行。
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-23452
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Missing Authentication for Critical Function in SICK FX0-GPNT v3 Firmware Version V3.04 and V3.05 allows an unprivileged remote attacker to achieve arbitrary remote code execution via maliciously crafted RK512 commands to the listener on TCP port 9000.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
SICK FX0-GPNT 访问控制错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SICK FX0-GPNT00000是德国西克（SICK）公司的一款内置了以太网交换机的安全控制模块。 SICK FX0-GPNT v3 Firmware V3.04版本、V3.05版本存在安全漏洞，该漏洞源于缺少对关键功能的身份验证。攻击者利用该漏洞通过恶意制作的 RK512 命令对 TCP 端口 9000 上的侦听器实现任意远程代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | FX0-GPNT v3 Firmware | Version V3.04 and V3.05 | - |
|
II. Public POCs for CVE-2023-23452
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-23452
请登录查看更多情报信息。
Same Patch Batch · n/a · 2023-02-20 · 15 CVEs total
| CVE-2023-26234 | 6.6 MEDIUM | JD-GUI 代码问题漏洞 |
| CVE-2019-25104 | 3.5 LOW | rtcwcoop Team Command ai_cast_script.c AICast_ScriptLoad denial of service |
| CVE-2016-15025 | 3.5 LOW | generator-hottowel 404 Error _app.js cross site scripting |
| CVE-2022-44216 | GNUBOARD5 访问控制错误漏洞 | |
| CVE-2022-48328 | MISP 安全漏洞 | |
| CVE-2022-48329 | MISP 安全漏洞 | |
| CVE-2022-48337 | GNU Emacs 操作系统命令注入漏洞 | |
| CVE-2022-48338 | GNU Emacs 命令注入漏洞 | |
| CVE-2022-48339 | GNU Emacs 命令注入漏洞 | |
| CVE-2023-23453 | SICK FX0-GENT 访问控制错误漏洞 | |
| CVE-2023-26081 | GNOME Web 安全漏洞 | |
| CVE-2023-26092 | Liima 安全漏洞 | |
| CVE-2023-26093 | Liima SQL注入漏洞 | |
| CVE-2023-26235 | JD-GUI 跨站脚本漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-306
-
CVE-2025-30053
Missing Authentication in CGM CLININET -
CVE-2025-30043
Missing Authentication in CGM CLININET -
CVE-2026-19677
Authentication Bypass Leading to Server-Side Command Executi -
CVE-2026-110825
Kiloview E3 NDI Encoder Missing Authentication for Critical -
CVE-2026-111100
Kiloview E3 NDI Encoder Missing Authentication for Critical
V. Comments for CVE-2023-23452
No comments yet