CVE-2023-23449
published 2023-05-15CVE-2023-23449: Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote…
PriorityP430medium5.3CVSS 3.1
AVNACLPRNUINSUCLINAN
EPSS
0.78%
51.5th percentile
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker
to gain information about valid usernames by analyzing challenge responses from the server via the
REST interface.
Affected
14 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sick | ftmg-esd15axx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esd20axx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esd25axx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esn40sxx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esn50sxx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esr40sxx_firmware | < 2.0 | 2.0 |
| sick | ftmg-esr50sxx_firmware | < 2.0 | 2.0 |
| sick_ag | sick_ftmg-esd15axx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esd20axx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esd25axx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esn40sxx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esn50sxx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esr40sxx_air_flow_sensor | — | — |
| sick_ag | sick_ftmg-esr50sxx_air_flow_sensor | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2023-05-15
Published