CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2023-23450
Critical (9.8) in sick. EPSS 0.7% chance of exploitation in the next 30 days.
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR
FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526
allows an unprivileged remote attacker to use a password hash instead of an actual password to login
to a valid user account via the REST interface.
Severity
- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 53% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-287, CWE-836
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sick:ftmg-esd15axx_firmware
- sick:ftmg-esd20axx_firmware
- sick:ftmg-esd25axx_firmware
- sick:ftmg-esn40sxx_firmware
- sick:ftmg-esn50sxx_firmware
- sick:ftmg-esr40sxx_firmware
- sick:ftmg-esr50sxx_firmware