Authentication Bypass in SICK FTMg AIR FLOW SENSOR
CVE-2023-23450
6.2MEDIUM
Key Information:
- Vendor
Sick Ag
- Status
- Vendor
- CVE Published:
- 15 May 2023
What is CVE-2023-23450?
The issue arises from the use of a password hash instead of the actual password for user authentication in the SICK FTMg AIR FLOW SENSOR. This flaw permits an unprivileged remote attacker to gain access to a valid user account through the REST interface, thereby compromising the integrity and security of the device. Affected models include various part numbers, and it is critical to address this vulnerability to prevent potential unauthorized access.
Affected Version(s)
SICK FTMG-ESD15AXX AIR FLOW SENSOR all firmware versions
SICK FTMG-ESD20AXX AIR FLOW SENSOR all firmware versions
SICK FTMG-ESD25AXX AIR FLOW SENSOR all firmware versions