CVE-2023-23445

CVE-2023-23445 affects SICK FTMg AIR FLOW SENSOR (partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526). The root cause is Improper Access Control allowing an unprivileged remote attacker to access data fields via the REST interface. The CVE has a high impact on confidentiali...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of improper access control, which allows an unprivileged remote attacker to gain unauthorized access to data fields via the REST interface using an...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of improper access control, which allows an unprivileged remote attacker to download a file using an unprivileged account via the REST interface...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from an observable response discrepancy that allows a remote attacker to analyze a query response from a server via the REST interface to obtain information about a valid...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from the presence of sensitive information stored in clear text, allowing a remote attacker to potentially steal user credentials stored locally in a user's browser via a cross-site...

SICK FTMg 授权问题漏洞

SICK FTMg is a flow sensor from SICK, Germany. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that stems from authentication using a password hash instead of a password, allowing an unprivileged remote attacker to log in to a valid user account via the REST interface using the...

PT-2023-18955 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR versions with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue allows an unprivileged remote attacker to download files by using an unprivileged account via the "REST...

PT-2023-18954 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue is related to improper access control, allowing an unprivileged remote attacker to gain unauthorized access to dat...

CVE-2023-23449: Observable Response Discrepancy

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface...

PT-2023-18960

Name of the Vulnerable Software and Affected Versions SICK FTMg AIR FLOW SENSOR versions affected versions not specified Description The issue allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface...

PT-2023-18958 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the serve...

CVE-2023-23445: Improper Access Control

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface...

PT-2023-18956 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue allows an unprivileged remote attacker to influence the availability of the webserver by invoking several open fil...

SICK FTMg 安全漏洞

SICK FTMg is a flow sensor from SICK. A security vulnerability exists in the SICK FTMg AIR FLOW SENSOR that arises from the inclusion of sensitive information in the source code, which could allow a remote attacker to analyze the source code to obtain information about a valid user name...

PT-2023-18957 · Sick · Sick Ftmg Air Flow Sensor

Name of the Vulnerable Software and Affected Versions: SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 Description: The issue allows a remote attacker to gain information about valid usernames via analysis of source code. This is due to the...

CVE-2023-23450: Use of Password Hash Instead of Password for Authentication

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via...

CVE-2023-23448: Inclusion of Sensitive Information in Source Code

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code...

CVE-2023-31409: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests...

CVE-2023-31408: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attac...

CVE-2023-23446: Improper Access Control

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface...