CVE-2023-23450CWE-836

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524…

Medium · published May 15, 2023

CVSS v3.1
6.2
EPSS
1%
Percentile
53.0
In the wild
Unconfirmed
What it is

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR

FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526

allows an unprivileged remote attacker to use a password hash instead of an actual password to login

to a valid user account via the REST interface.

The record
Technical detail
CVSS v3.1
6.2 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00710 · 53.0th percentile
Weakness
CWE-836 · Use of Password Hash Instead of Password for Authentication
Published
2023-05-15T10:55Z
EPSS history
Timeline
  • 15 MAY 10:55Z
    Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524…
    cvelistv5