VYPR
← All advisories
High severity7.5NVD Advisory· Published May 15, 2023· Updated Jun 1, 2026

CVE-2023-23445

CVE-2023-23445

Description

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

9
  • SICK AG/Ftmg Esd15axx Firmware3 versions
    cpe:2.3:o:sick:ftmg-esd15axx_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sick:ftmg-esd15axx_firmware:*:*:*:*:*:*:*:*range: <2.0
    • cpe:2.3:o:sick:ftmg-esd25axx_firmware:*:*:*:*:*:*:*:*range: <2.0
    • cpe:2.3:o:sick:ftmg-esn50sxx_firmware:*:*:*:*:*:*:*:*range: <2.0
  • SICK AG/Ftmg Esd20axx Firmware
    cpe:2.3:o:sick:ftmg-esd20axx_firmware:*:*:*:*:*:*:*:*
    Range: <2.0
  • SICK AG/Ftmg Esr40sxx Firmware3 versions
    cpe:2.3:o:sick:ftmg-esn40sxx_firmware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:sick:ftmg-esn40sxx_firmware:*:*:*:*:*:*:*:*range: <2.0
    • cpe:2.3:o:sick:ftmg-esr40sxx_firmware:*:*:*:*:*:*:*:*range: <2.0
    • cpe:2.3:o:sick:ftmg-esr50sxx_firmware:*:*:*:*:*:*:*:*range: <2.0
  • SICK AG/Sick Ftmg Esr40sxx Air Flow Sensorllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: all firmware versions

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.