CVE-2021-32503

CVE-2021-32503 affects SICK FTMg/FieldEcho devices where an unauthenticated user can access sensitive web URLs via a GET request, potentially enabling further attacks. Public exploit details are not provided; SICK PSIRT notes no known public exploits and has released firmware fixes, recommending ...

CVE-2021-32504

The CVE-2021-32504 entry maps to the SICK FTMg device vulnerability. Unauthenticated users can access sensitive web URLs via GET, which should be restricted to maintenance users only. The underlying issue is a lack of proper access control for web resources, enabling an attacker to retrieve sensi...