CVE-2023-23449: Medium severity SICK Ftmg-esd20axx Firmware vulnerability
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-23449?
The severity of CVE-2023-23449 is medium with a severity value of 5.3.
How does CVE-2023-23449 impact SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526?
CVE-2023-23449 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.
Is Sick Ftmg-esd20axx Firmware vulnerable to CVE-2023-23449?
Yes, Sick Ftmg-esd20axx Firmware is vulnerable to CVE-2023-23449.
How do I fix CVE-2023-23449?
There is currently no fix available for CVE-2023-23449. It is recommended to follow the vendor's instructions and recommendations.
Where can I find more information about CVE-2023-23449?
More information about CVE-2023-23449 can be found at the following references: [Link 1](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json), [Link 2](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf), [Link 3](https://sick.com/psirt)