Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR
FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526
allows an unprivileged remote attacker to use a password hash instead of an actual password to login
to a valid user account via the REST interface.
References
Link | Resource |
---|---|
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json | Vendor Advisory |
https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf | Vendor Advisory |
https://sick.com/psirt | Vendor Advisory |
History
No history.
![cve-icon](/static/img/cve-icon.png)
Status: PUBLISHED
Assigner: SICK AG
Published: 2023-05-15T10:55:10.687Z
Updated: 2023-05-15T10:55:10.687Z
Reserved: 2023-01-12T04:07:53.940Z
Link: CVE-2023-23450
JSON object: View
![cve-icon](/static/img/nvd-icon.png)
Status : Analyzed
Published: 2023-05-15T11:15:09.407
Modified: 2023-05-30T14:11:13.857
Link: CVE-2023-23450
JSON object: View
![cve-icon](/static/img/redhat-icon.png)
No data.