← Database

CVE-2023-23450

MEDIUM CVSS: 6.2 Published: 2023-05-15 Modified: 2026-06-17

Description

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.

Affected Platforms

Sick Ftmg-Esd25Axx FirmwareSick Ftmg-Esd15AxxSick Ftmg-Esn50SxxSick Ftmg-Esd15Axx FirmwareSick Ftmg-Esd20Axx FirmwareSick Ftmg-Esd25AxxSick Ftmg-Esn40SxxSick Ftmg-Esr40Sxx FirmwareSick Ftmg-Esn40Sxx FirmwareSick Ftmg-Esr50Sxx

Weakness Type

CWE-836, CWE-287

References