CVE-2023-23451

CVE-2023-23451 describes a critical vulnerability in various SICK Flexi Classic and Flexi Soft Gateway models, where Telnet is enabled by default without a password. This flaw, rated 9.8 CVSS (CRITICAL), allows unauthenticated remote attackers to gain full control over affected devices due to the lack of authentication. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the ease of exploitation and severe impact (complete compromise) make it a high-risk vulnerability. Organizations using the specified SICK gateways should immediately disable Telnet or implement strong authentication to mitigate this threat.