CVE-2023-31408

CVSS V2 None CVSS V3 None

Description

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attacks.

Overview

CVE ID
CVE-2023-31408

Assigner
psirt@sick.de

Vulnerability Status
Received

Published Version
2023-05-15T11:15:09

Last Modified Date
2023-05-15T11:15:09

Weakness Enumerations

CWE	URL
CWE-312	http://cwe.mitre.org/data/definitions/312.html

References

Reference URL	Reference Tags
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf
https://sick.com/psirt

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-31408
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-31408

History

Created	Old Value	New Value	Data Type	Notes
2023-05-15 12:01:11				Added to TrackCVE
2023-05-15 12:01:14			Weakness Enumeration	new