SICK AG SICK FTMG Esd25Axx AIR FLOW Sensor vulnerabilities
8 vulnerabilities
Known vulnerabilities in SICK AG SICK FTMG Esd25Axx AIR FLOW Sensor, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2023-31409sick agsick ftmg-esd15axx air flow sensor+13
EPSS score1.13%
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.CVE-2023-31408sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.43%
Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with
Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote
attacker to potentially steal user credentials that are stored in the user’s browsers local storage via
cross-site-scripting attacks.CVE-2023-23445sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.66%
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote
attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the
REST interface.CVE-2023-23450sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.71%
Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR
FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526
allows an unprivileged remote attacker to use a password hash instead of an actual password to login
to a valid user account via the REST interface.CVE-2023-23448sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.79%
Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a
remote attacker to gain information about valid usernames via analysis of source code.CVE-2023-23447sick agsick ftmg-esd15axx air flow sensor+13EPSS score1.12%
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged
remote attacker to influence the availability of the webserver by invocing several open file requests via
the REST interface.CVE-2023-23449sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.78%
Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker
to gain information about valid usernames by analyzing challenge responses from the server via the
REST interface.CVE-2023-23446sick agsick ftmg-esd15axx air flow sensor+13EPSS score0.90%
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers
1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.