Improper access control

2023-05-1511:15:00

PRIOn knowledge base

www.prio-n.com

access control

sick ftmg

air flow sensor

part numbers

remote attacker

download files

unprivileged account

rest interface

nvd

7.5 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.4%

JSON

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.

CPENameOperatorVersion
ftmg-esd15axx_firmwarelt2.0
ftmg-esd20axx_firmwarelt2.0
ftmg-esd25axx_firmwarelt2.0
ftmg-esn40sxx_firmwarelt2.0
ftmg-esn50sxx_firmwarelt2.0
ftmg-esr40sxx_firmwarelt2.0
ftmg-esr50sxx_firmwarelt2.0

Name	Operator	Version
ftmg-esd15axx_firmware	lt	2.0
ftmg-esd20axx_firmware	lt	2.0
ftmg-esd25axx_firmware	lt	2.0
ftmg-esn40sxx_firmware	lt	2.0
ftmg-esn50sxx_firmware	lt	2.0
ftmg-esr40sxx_firmware	lt	2.0
ftmg-esr50sxx_firmware	lt	2.0