Vulnerabilities > CVE-2023-23446 - Incorrect Authorization vulnerability in Sick products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
Improper Access Control in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged remote attacker to download files by using a therefore unpriviledged account via the REST interface.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| OS | 7 | |
| Hardware | 7 |