CVE-2023-23449 in FTMg Air Flow Sensor

الملخص

بحسب MITRE • 15/05/2023

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.

Be aware that VulDB is the high quality source for vulnerability data.

• مسؤول: SICK AG
• حجز: 12/01/2023
• إفشاء: 15/05/2023
• الاعتدال: تمت الموافقة
• إدخال: VDB-229001
• CPE: جاهز
• CWE: CWE-204 (مؤكد)
• CVSS: 5.3 (NVD)
• EPSS: 0.00377
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-23449
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-23449
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-23449/