Improper Access Control in SICK FTMg AIR FLOW SENSOR with...

7.5 CVSS

Vulnerability Description

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by using a therefore unpriviledged account via the REST interface.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-23445

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SICK AG

View All →

CVE-2025-9914

The credentials of the users stored in the system's local...

Medium 4.3

CVE-2025-9913

Cross Site Scripting: Session Hijacking

Medium 4.5

CVE-2025-59463

Denial-of-service (DoS) via chunk size mismatch

Medium 4.3

CVE-2025-59462

Denial-of-service (DoS) via delayed or missing client response

Medium 6.5

CVE-2025-59461

API does not require authentication

High 7.6

Affected Vendor

SICK AG

View all reports →

Affected Software

SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR

Vulnerable Versions:

all firmware versions