Authentication Bypass in SICK FTMg AIR FLOW SENSOR

CVE-2023-23450

Summary

The issue arises from the use of a password hash instead of the actual password for user authentication in the SICK FTMg AIR FLOW SENSOR. This flaw permits an unprivileged remote attacker to gain access to a valid user account through the REST interface, thereby compromising the integrity and security of the device. Affected models include various part numbers, and it is critical to address this vulnerability to prevent potential unauthorized access.

References