CVE-2023-23447: sick ag sick ftmg-esd15axx air flow sensor Uncontrolled Resource Consumption
Vulnerability summary
CVE-2023-23447 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in sick ag sick ftmg-esd15axx air flow sensor. EPSS estimates a 1.12% chance of exploitation in the next 30 days, higher than 65.6% of scored vulnerabilities.
Timeline
- 15-05-2023PublishedVulnerability first disclosed.
- 01-06-2026Last modifiedVulnerability information updated.
Description
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the webserver by invocing several open file requests via the REST interface.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.12%
Chance of exploitation in the next 30 days
Percentile
66%
Versus all other CVEs
30-day change
0.00 pp
From 1.12% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Sick7 products
- ftmg-esd15axx_firmware< 2.0
- ftmg-esd20axx_firmware< 2.0
- ftmg-esd25axx_firmware< 2.0
- ftmg-esn40sxx_firmware< 2.0
- ftmg-esn50sxx_firmware< 2.0
Sick ag7 products
- sick ftmg-esd15axx air flow sensor< v3.0.0.131.Release
- sick ftmg-esd20axx air flow sensor< v3.0.0.131.Release
- sick ftmg-esd25axx air flow sensor< v3.0.0.131.Release
- sick ftmg-esn40sxx air flow sensor< v3.0.0.131.Release
- sick ftmg-esn50sxx air flow sensor< v3.0.0.131.Release
2 vendors · 14 products
References
3 links- sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdfVendor Advisory