CVE-2021-32504

Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system...

CVE-2021-32504

The CVE-2021-32504 entry maps to the SICK FTMg device vulnerability. Unauthenticated users can access sensitive web URLs via GET, which should be restricted to maintenance users only. The underlying issue is a lack of proper access control for web resources, enabling an attacker to retrieve sensi...