CVE-2023-23449

CVSS V2 None CVSS V3 None

Description

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.

Overview

CVE ID
CVE-2023-23449

Assigner
psirt@sick.de

Vulnerability Status
Received

Published Version
2023-05-15T11:15:09

Last Modified Date
2023-05-15T11:15:09

Weakness Enumerations

CWE	URL
CWE-204	http://cwe.mitre.org/data/definitions/204.html

References

Reference URL	Reference Tags
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf
https://sick.com/psirt

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-23449
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-23449

History

Created	Old Value	New Value	Data Type	Notes
2023-05-15 12:01:11				Added to TrackCVE
2023-05-15 12:01:13			Weakness Enumeration	new