Lucene search
HistoryMay 15, 2023 - 11:15 a.m.
CVE-2023-23446
improper access control
sick ftmg
air flow sensor
partnumbers
unprivileged
remote download
rest interface
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
51.3%
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.
Affected configurations
Node
sickftmg-esd20axx_firmwareRange<2.0
sickftmg-esd20axxMatch-
Node
sickftmg-esd25axx_firmwareRange<2.0
sickftmg-esd25axxMatch-
Node
sickftmg-esn40sxx_firmwareRange<2.0
sickftmg-esn40sxxMatch-
Node
sickftmg-esn50sxx_firmwareRange<2.0
sickftmg-esn50sxxMatch-
Node
sickftmg-esr50sxx_firmwareRange<2.0
sickftmg-esr50sxxMatch-
Node
sickftmg-esr40sxx_firmwareRange<2.0
sickftmg-esr40sxxMatch-
Node
sickftmg-esd15axx_firmwareRange<2.0
sickftmg-esd15axxMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| sick | ftmg-esd20axx_firmware | * | cpe:2.3:o:sick:ftmg-esd20axx_firmware:*:*:*:*:*:*:*:* |
| sick | ftmg-esd20axx | - | cpe:2.3:h:sick:ftmg-esd20axx:-:*:*:*:*:*:*:* |
| sick | ftmg-esd25axx_firmware | * | cpe:2.3:o:sick:ftmg-esd25axx_firmware:*:*:*:*:*:*:*:* |
| sick | ftmg-esd25axx | - | cpe:2.3:h:sick:ftmg-esd25axx:-:*:*:*:*:*:*:* |
| sick | ftmg-esn40sxx_firmware | * | cpe:2.3:o:sick:ftmg-esn40sxx_firmware:*:*:*:*:*:*:*:* |
| sick | ftmg-esn40sxx | - | cpe:2.3:h:sick:ftmg-esn40sxx:-:*:*:*:*:*:*:* |
| sick | ftmg-esn50sxx_firmware | * | cpe:2.3:o:sick:ftmg-esn50sxx_firmware:*:*:*:*:*:*:*:* |
| sick | ftmg-esn50sxx | - | cpe:2.3:h:sick:ftmg-esn50sxx:-:*:*:*:*:*:*:* |
| sick | ftmg-esr50sxx_firmware | * | cpe:2.3:o:sick:ftmg-esr50sxx_firmware:*:*:*:*:*:*:*:* |
| sick | ftmg-esr50sxx | - | cpe:2.3:h:sick:ftmg-esr50sxx:-:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-23446
2023-05-15 10:52:30
cve
cve
CVE-2023-23446
2023-05-15 11:15:09
prion
prion
Improper access control
2023-05-15 11:15:00
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS
0.002
Percentile
51.3%
Related for NVD:CVE-2023-23446