CVE-2023-23449

MEDIUM

Sick Ftmg-esd20axx Firmware < 2.0 - Information Disclosure

Title source: rule

Description

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.

References (3)

[Vendor Advisory] https://sick.com/psirt

[Vendor Advisory] https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf

[Vendor Advisory] https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json

Scores

CVSS v3 5.3

EPSS 0.0025

EPSS Percentile 47.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable yes

Technical Impact partial

Details

CWE

CWE-204 CWE-203

Status published

Products (7)

sick/ftmg-esd15axx_firmware < 2.0

sick/ftmg-esd20axx_firmware < 2.0

sick/ftmg-esd25axx_firmware < 2.0

sick/ftmg-esn40sxx_firmware < 2.0

sick/ftmg-esn50sxx_firmware < 2.0

sick/ftmg-esr40sxx_firmware < 2.0

sick/ftmg-esr50sxx_firmware < 2.0

Published May 15, 2023

Tracked Since Feb 18, 2026