cbcvebase.
CVE-2023-23446
published 2023-05-15

CVE-2023-23446: Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged…

PriorityP346high7.5CVSS 3.1
AVNACLPRNUINSUCHINAN
EPSS
0.89%
54.9th percentile
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.

Affected

14 ranges
VendorProductVersion rangeFixed in
sickftmg-esd15axx_firmware< 2.02.0
sickftmg-esd20axx_firmware< 2.02.0
sickftmg-esd25axx_firmware< 2.02.0
sickftmg-esn40sxx_firmware< 2.02.0
sickftmg-esn50sxx_firmware< 2.02.0
sickftmg-esr40sxx_firmware< 2.02.0
sickftmg-esr50sxx_firmware< 2.02.0
sick_agsick_ftmg-esd15axx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esd20axx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esd25axx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esn40sxx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esn50sxx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esr40sxx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
sick_agsick_ftmg-esr50sxx_air_flow_sensor< v3.0.0.131.Releasev3.0.0.131.Release
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.