← Database

CVE-2023-23446

HIGH CVSS: 7.5 Published: 2023-05-15 Modified: 2026-06-17

Description

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.

Affected Platforms

Sick Ftmg-Esd25Axx FirmwareSick Ftmg-Esd15AxxSick Ftmg-Esn50SxxSick Ftmg-Esd15Axx FirmwareSick Ftmg-Esd20Axx FirmwareSick Ftmg-Esd25AxxSick Ftmg-Esn40SxxSick Ftmg-Esr40Sxx FirmwareSick Ftmg-Esn40Sxx FirmwareSick Ftmg-Esr50Sxx

Weakness Type

CWE-284, CWE-863

References