Vulnerability Description
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Ftmg-Esd20Axx Firmware | < 2.0 |
| Sick | Ftmg-Esd20Axx | - |
| Sick | Ftmg-Esd25Axx Firmware | < 2.0 |
| Sick | Ftmg-Esd25Axx | - |
| Sick | Ftmg-Esn40Sxx Firmware | < 2.0 |
| Sick | Ftmg-Esn40Sxx | - |
| Sick | Ftmg-Esn50Sxx Firmware | < 2.0 |
| Sick | Ftmg-Esn50Sxx | - |
| Sick | Ftmg-Esr50Sxx Firmware | < 2.0 |
| Sick | Ftmg-Esr50Sxx | - |
| Sick | Ftmg-Esr40Sxx Firmware | < 2.0 |
| Sick | Ftmg-Esr40Sxx | - |
| Sick | Ftmg-Esd15Axx Firmware | < 2.0 |
| Sick | Ftmg-Esd15Axx | - |
Related Weaknesses (CWE)
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdfVendor Advisory
- https://sick.com/psirtVendor Advisory
FAQ
What is CVE-2023-23450?
CVE-2023-23450 is a vulnerability with a CVSS score of 6.2 (MEDIUM). Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote a...
How severe is CVE-2023-23450?
CVE-2023-23450 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-23450?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Ftmg-Esd20Axx Firmware, Sick Ftmg-Esd20Axx, Sick Ftmg-Esd25Axx Firmware, Sick Ftmg-Esd25Axx, Sick Ftmg-Esn40Sxx Firmware.