Lucene search

[email protected]NVD:CVE-2023-23445

HistoryMay 15, 2023 - 11:15 a.m.

CVE-2023-23445

2023-05-1511:15:09

CWE-863

CWE-284

[email protected]

web.nvd.nist.gov

access control

sick ftmg

air flow sensor

partnumbers

remote attacker

unauthorized access

data fields

rest interface

cve-2023-23445

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

49.7%

JSON

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote
attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the
REST interface.

Affected configurations

NVD

Node

sickftmg-esd20axxMatch-

AND

sickftmg-esd20axx_firmwareRange<2.0

Node

sickftmg-esd25axxMatch-

AND

sickftmg-esd25axx_firmwareRange<2.0

Node

sickftmg-esn40sxxMatch-

AND

sickftmg-esn40sxx_firmwareRange<2.0

Node

sickftmg-esn50sxxMatch-

AND

sickftmg-esn50sxx_firmwareRange<2.0

Node

sickftmg-esr50sxxMatch-

AND

sickftmg-esr50sxx_firmwareRange<2.0

Node

sickftmg-esr40sxxMatch-

AND

sickftmg-esr40sxx_firmwareRange<2.0

Node

sickftmg-esd15axxMatch-

AND

sickftmg-esd15axx_firmwareRange<2.0

References

sick.com/.well-known/csaf/white/2023/sca-2023-0004.json

sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf

sick.com/psirt

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

49.7%

JSON

Related for NVD:CVE-2023-23445

cvelist1 cve1 prion1