CVE-2023-23450
—CVSS 3.1
9.8 critical
EPSS
<1%p51
Published
()
Modified
Description
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.
- Vendors
- sick
- Products
- ftmg-esd20axx firmware, ftmg-esd25axx firmware, ftmg-esn40sxx firmware, ftmg-esn50sxx firmware, ftmg-esr50sxx firmware, ftmg-esr40sxx firmware, ftmg-esd15axx firmware
- Weakness
- CWE-836, CWE-287
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
In the news0 stories
No ingested article mentions this CVE yet.