CVE-2023-23448

MEDIUM

SICK FTMg AIR FLOW SENSOR - Info Disclosure

Title source: llm

Description

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code.

References (3)

[Vendor Advisory] https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json

[Vendor Advisory] https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf

[Vendor Advisory] https://sick.com/psirt

Scores

CVSS v3 5.3

EPSS 0.0018

EPSS Percentile 39.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Classification

CWE

CWE-540 CWE-668

Status published

Affected Products (7)

sick/ftmg-esd20axx_firmware < 2.0

sick/ftmg-esd25axx_firmware < 2.0

sick/ftmg-esn40sxx_firmware < 2.0

sick/ftmg-esn50sxx_firmware < 2.0

sick/ftmg-esr50sxx_firmware < 2.0

sick/ftmg-esr40sxx_firmware < 2.0

sick/ftmg-esd15axx_firmware < 2.0

Timeline

Published May 15, 2023

Tracked Since Feb 18, 2026