CVE-2023-31409: High severity SICK Ftmg-esd20axx Firmware vulnerability
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-31409?
The severity of CVE-2023-31409 is high with a severity value of 7.5.
How does CVE-2023-31409 affect SICK FTMg AIR FLOW SENSOR?
CVE-2023-31409 allows a remote attacker to influence the availability of the webserver by invoking a Slowloris style attack via HTTP requests on SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526.
Which software versions are affected by CVE-2023-31409?
CVE-2023-31409 affects Sick Ftmg-esd20axx Firmware versions up to but not including 2.0, Sick Ftmg-esd25axx Firmware versions up to but not including 2.0, Sick Ftmg-esn40sxx Firmware versions up to but not including 2.0, Sick Ftmg-esn50sxx Firmware versions up to but not including 2.0, Sick Ftmg-esr50sxx Firmware versions up to but not including 2.0, Sick Ftmg-esr40sxx Firmware versions up to but not including 2.0, Sick Ftmg-esd15axx Firmware versions up to but not including 2.0.
How can I fix CVE-2023-31409?
To fix CVE-2023-31409, it is recommended to update to a version of Sick Ftmg-esd20axx Firmware, Sick Ftmg-esd25axx Firmware, Sick Ftmg-esn40sxx Firmware, Sick Ftmg-esn50sxx Firmware, Sick Ftmg-esr50sxx Firmware, Sick Ftmg-esr40sxx Firmware, or Sick Ftmg-esd15axx Firmware that is higher than 2.0.
Where can I find more information about CVE-2023-31409?
More information about CVE-2023-31409 can be found at the following references: [CVE-2023-31409 JSON](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json), [CVE-2023-31409 PDF](https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf), [SICK website](https://sick.com/psirt).