CVE-2023-23449
First published: Mon May 15 2023(Updated: )
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.
Credit: psirt@sick.de
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sick Ftmg-esd20axx Firmware | <2.0 | |
| Sick Ftmg-esd20axx | ||
| Sick Ftmg-esd25axx Firmware | <2.0 | |
| Sick Ftmg-esd25axx | ||
| Sick Ftmg-esn40sxx Firmware | <2.0 | |
| Sick Ftmg-esn40sxx | ||
| Sick Ftmg-esn50sxx Firmware | <2.0 | |
| Sick Ftmg-esn50sxx | ||
| Sick Ftmg-esr50sxx Firmware | <2.0 | |
| Sick Ftmg-esr50sxx | ||
| Sick Ftmg-esr40sxx Firmware | <2.0 | |
| Sick Ftmg-esr40sxx | ||
| Sick Ftmg-esd15axx Firmware | <2.0 | |
| Sick Ftmg-esd15axx |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2023-23449?
The severity of CVE-2023-23449 is medium with a severity value of 5.3.
How does CVE-2023-23449 impact SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526?
CVE-2023-23449 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.
Is Sick Ftmg-esd20axx Firmware vulnerable to CVE-2023-23449?
Yes, Sick Ftmg-esd20axx Firmware is vulnerable to CVE-2023-23449.
How do I fix CVE-2023-23449?
There is currently no fix available for CVE-2023-23449. It is recommended to follow the vendor's instructions and recommendations.
Where can I find more information about CVE-2023-23449?
More information about CVE-2023-23449 can be found at the following references: [Link 1](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json), [Link 2](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf), [Link 3](https://sick.com/psirt)
- collector/nvd-index
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/sick
- canonical/sick ftmg-esd20axx firmware
- canonical/sick ftmg-esd20axx
- canonical/sick ftmg-esd25axx firmware
- canonical/sick ftmg-esd25axx
- canonical/sick ftmg-esn40sxx firmware
- canonical/sick ftmg-esn40sxx
- canonical/sick ftmg-esn50sxx firmware
- canonical/sick ftmg-esn50sxx
- canonical/sick ftmg-esr50sxx firmware
- canonical/sick ftmg-esr50sxx
- canonical/sick ftmg-esr40sxx firmware
- canonical/sick ftmg-esr40sxx
- canonical/sick ftmg-esd15axx firmware
- canonical/sick ftmg-esd15axx