CVE-2023-23447: High severity SICK Ftmg-esd20axx Firmware vulnerability
Published May 15, 2023
·Updated
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface.
Affected Software
28 affected components
SICK Ftmg-esd20axx Firmware<2.0
SICK Ftmg-esd20axx
SICK Ftmg-esd25axx Firmware<2.0
SICK Ftmg-esd25axx
SICK Ftmg-esn40sxx Firmware<2.0
SICK Ftmg-esn40sxx
SICK Ftmg-esn50sxx Firmware<2.0
SICK Ftmg-esn50sxx
SICK Ftmg-esr50sxx Firmware<2.0
SICK Ftmg-esr50sxx
SICK Ftmg-esr40sxx Firmware<2.0
SICK Ftmg-esr40sxx
SICK Ftmg-esd15axx Firmware<2.0
SICK Ftmg-esd15axx
All of the following
SICK Ftmg-esd20axx Firmware<2.0
SICK Ftmg-esd20axx
All of the following
SICK Ftmg-esd25axx Firmware<2.0
SICK Ftmg-esd25axx
All of the following
SICK Ftmg-esn40sxx Firmware<2.0
SICK Ftmg-esn40sxx
All of the following
SICK Ftmg-esn50sxx Firmware<2.0
SICK Ftmg-esn50sxx
All of the following
SICK Ftmg-esr50sxx Firmware<2.0
SICK Ftmg-esr50sxx
All of the following
SICK Ftmg-esr40sxx Firmware<2.0
SICK Ftmg-esr40sxx
All of the following
SICK Ftmg-esd15axx Firmware<2.0
SICK Ftmg-esd15axx
Remediation
Information
SICK has released a new major version v3.0.0.131.Release of the SICK FTMg firmware and
recommends updating to the newest version.
Event History
May 15, 2023
CVE Published
via MITRE·10:53 AM
Data Sourced
via MITRE·10:53 AM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the CVE ID of this vulnerability?
CVE-2023-23447
2
What is the title of this vulnerability?
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR
3
What is the severity of CVE-2023-23447?
The severity of CVE-2023-23447 is high with a severity value of 7.5.
4
What is the affected software of this vulnerability?
The affected software is SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526.
5
How does this vulnerability affect the availability of the webserver?
This vulnerability allows an unprivileged remote attacker to influence the availability of the webserver by invoking several open file requests via the REST interface.