CVE-2023-23448
First published: Mon May 15 2023(Updated: )
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code.
Credit: psirt@sick.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sick Ftmg-esd20axx Firmware | <2.0 | |
| Sick Ftmg-esd20axx | ||
| Sick Ftmg-esd25axx Firmware | <2.0 | |
| Sick Ftmg-esd25axx | ||
| Sick Ftmg-esn40sxx Firmware | <2.0 | |
| Sick Ftmg-esn40sxx | ||
| Sick Ftmg-esn50sxx Firmware | <2.0 | |
| Sick Ftmg-esn50sxx | ||
| Sick Ftmg-esr50sxx Firmware | <2.0 | |
| Sick Ftmg-esr50sxx | ||
| Sick Ftmg-esr40sxx Firmware | <2.0 | |
| Sick Ftmg-esr40sxx | ||
| Sick Ftmg-esd15axx Firmware | <2.0 | |
| Sick Ftmg-esd15axx |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-23448?
CVE-2023-23448 is a vulnerability that allows a remote attacker to gain information about valid usernames through the analysis of source code in the SICK FTMg AIR FLOW SENSOR.
What is the severity of CVE-2023-23448?
The severity of CVE-2023-23448 is medium with a CVSS score of 5.3.
Which software is affected by CVE-2023-23448?
The SICK Ftmg-esd20axx Firmware version up to 2.0 is affected.
How can a remote attacker exploit CVE-2023-23448?
A remote attacker can exploit CVE-2023-23448 by analyzing the source code of the SICK FTMg AIR FLOW SENSOR to gain information about valid usernames.
Are other SICK FTMg sensors vulnerable to CVE-2023-23448?
No, other SICK FTMg sensors are not vulnerable to CVE-2023-23448.
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/description
- agent/event
- agent/softwarecombine
- agent/tags
- agent/first-publish-date
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/sick
- canonical/sick ftmg-esd20axx firmware
- canonical/sick ftmg-esd20axx
- canonical/sick ftmg-esd25axx firmware
- canonical/sick ftmg-esd25axx
- canonical/sick ftmg-esn40sxx firmware
- canonical/sick ftmg-esn40sxx
- canonical/sick ftmg-esn50sxx firmware
- canonical/sick ftmg-esn50sxx
- canonical/sick ftmg-esr50sxx firmware
- canonical/sick ftmg-esr50sxx
- canonical/sick ftmg-esr40sxx firmware
- canonical/sick ftmg-esr40sxx
- canonical/sick ftmg-esd15axx firmware
- canonical/sick ftmg-esd15axx