Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW...

5.3 CVSS

Vulnerability Description

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attacks.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-31408

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SICK AG

View All →

CVE-2025-9914

The credentials of the users stored in the system's local...

Medium 4.3

CVE-2025-9913

Cross Site Scripting: Session Hijacking

Medium 4.5

CVE-2025-59463

Denial-of-service (DoS) via chunk size mismatch

Medium 4.3

CVE-2025-59462

Denial-of-service (DoS) via delayed or missing client response

Medium 6.5

CVE-2025-59461

API does not require authentication

High 7.6

Affected Vendor

SICK AG

View all reports →

Affected Software

SICK FTMG-ESD15AXX AIR FLOW SENSOR, SICK FTMG-ESD20AXX AIR FLOW SENSOR, SICK FTMG-ESD25AXX AIR FLOW SENSOR, SICK FTMG-ESN40SXX AIR FLOW SENSOR, SICK FTMG-ESN50SXX AIR FLOW SENSOR, SICK FTMG-ESR40SXX AIR FLOW SENSOR, SICK FTMG-ESR50SXX AIR FLOW SENSOR

Vulnerable Versions:

all firmware versions