MEDIUM🇵🇱 Wersja polska

CVE-2023-23450

CVSS 6.2v3.1pub. 2023-05-15upd. 2026-06-01

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

  • Sick Ftmg Esd15axx

    HW
    Sick
    all versions

  • Sick Ftmg Esd15axx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esd20axx

    HW
    Sick
    all versions

  • Sick Ftmg Esd20axx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esd25axx

    HW
    Sick
    all versions

  • Sick Ftmg Esd25axx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esn40sxx

    HW
    Sick
    all versions

  • Sick Ftmg Esn40sxx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esn50sxx

    HW
    Sick
    all versions

  • Sick Ftmg Esn50sxx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esr40sxx

    HW
    Sick
    all versions

  • Sick Ftmg Esr40sxx Firmware

    OS
    Sick
    < 2.0

  • Sick Ftmg Esr50sxx

    HW
    Sick
    all versions

  • Sick Ftmg Esr50sxx Firmware

    OS
    Sick
    < 2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2023-23445HIGH7.5same product

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120...

CVE-2023-23446HIGH7.5same product

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120...

CVE-2023-23447HIGH7.5same product

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112...

CVE-2023-23448MEDIUM5.3same product

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 11002...

CVE-2023-23449MEDIUM5.3same product

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 11201...