CVE-2023-23445 json
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows…
published 2023-05-15 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27545
- cvss
- 7.5
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 51%
- public exploits
- 0
- none known
Summary
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface.
Patch / fix
- sick ftmg-esd20axx_firmware 2.0
- sick ftmg-esd25axx_firmware 2.0
- sick ftmg-esn40sxx_firmware 2.0
- sick ftmg-esn50sxx_firmware 2.0
- sick ftmg-esr50sxx_firmware 2.0
- sick ftmg-esr40sxx_firmware 2.0
- sick ftmg-esd15axx_firmware 2.0
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
0.66% chance of exploitation in the next 30 days, higher than 51% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
- SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD20AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD25AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESN40SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESN50SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESR40SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESR50SXX AIR FLOW SENSOR
Classification
References
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0004.pdf
vendor-advisory
-
sick.com
/psirt
issue-tracking, vendor-advisory
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0004.json
vendor-advisory
Sources
- CVE List CVE-2023-23445
- NVD CVE-2023-23445
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.