Read the docs

SICK AG

Records146All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical38CVSS 9.0–10.0
CVSS high65CVSS 7.0–8.9

Exploited now

SICK AG records in CISA KEV

No SICK AG vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Ftmg-esd15axx Firmware · all components

Priority MEDIUM 43

Use of Password Hash Instead of Password for Authentication in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to use a pass…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0071 Published 2023-05-15 No fix listed CWE-836
Priority MEDIUM 41

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01117 Published 2023-05-15 No fix listed CWE-400
Priority MEDIUM 41

Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to influence the availability of the we…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01117 Published 2023-05-15 Fixed in v3.0.0.131.Release CWE-400
Priority MEDIUM 41

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviled…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00891 Published 2023-05-15 Fixed in v3.0.0.131.Release CWE-284
Priority MEDIUM 40

Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to gain unauthorized access to data fields by usi…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00659 Published 2023-05-15 No fix listed CWE-284
Priority LOW 39

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00424 Published 2023-05-15 No fix listed CWE-312
Priority LOW 31

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00785 Published 2023-05-15 No fix listed CWE-204
Priority LOW 31

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usern…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00785 Published 2023-05-15 No fix listed CWE-540
Open these records in search →