CVE-2023-23450 (published 2023-05-15T10:55:10.687Z)

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR
FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526
allows an unprivileged remote attacker to use a password hash instead of an actual password to login
to a valid user account via the REST interface.


Affected products: Vendor: SICK AG
Product: SICK FTMG-ESD15AXX AIR FLOW SENSOR
Versions: all firmware versions