CVE-2023-23450 json
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 112011…
published 2023-05-15 3 y ago modified 2026-06-17 4 mo ago also EUVD-2023-27550
- cvss
- 6.2
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.7%
- EPSS 0.7% chance of exploitation in 30 days, percentile 53%
- public exploits
- 0
- none known
Summary
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a password hash instead of an actual password to login to a valid user account via the REST interface.
Patch / fix
- sick ftmg-esd20axx_firmware 2.0
- sick ftmg-esd25axx_firmware 2.0
- sick ftmg-esn40sxx_firmware 2.0
- sick ftmg-esn50sxx_firmware 2.0
- sick ftmg-esr50sxx_firmware 2.0
- sick ftmg-esr40sxx_firmware 2.0
- sick ftmg-esd15axx_firmware 2.0
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction
0.71% chance of exploitation in the next 30 days, higher than 53% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 3.1 | 6.2 | CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Affected products
- SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD20AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESD25AXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESN40SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESN50SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESR40SXX AIR FLOW SENSOR
- SICK AG SICK FTMG-ESR50SXX AIR FLOW SENSOR
Classification
References
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0004.pdf
vendor-advisory
-
sick.com
/psirt
issue-tracking, vendor-advisory
-
sick.com
/.well-known/csaf/white/2023/sca-2023-0004.json
vendor-advisory
Sources
- CVE List CVE-2023-23450
- NVD CVE-2023-23450
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.