medium5.3
CVE-2023-23449
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote att…
Impact
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Ftmg-Esd20axx Firmware | before 2.0 |
| Sick | Ftmg-Esd25axx Firmware | before 2.0 |
| Sick | Ftmg-Esn40sxx Firmware | before 2.0 |
| Sick | Ftmg-Esn50sxx Firmware | before 2.0 |
| Sick | Ftmg-Esr50sxx Firmware | before 2.0 |
| Sick | Ftmg-Esr40sxx Firmware | before 2.0 |
| Sick | Ftmg-Esd15axx Firmware | before 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf
- https://sick.com/psirt
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf
- https://sick.com/psirt