CVE-2023-23448

MEDIUM5.3

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code

Published May 15, 2023

Modified 11 months ago

No fix available

Details

Inclusion of Sensitive Information in Source Code in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames via analysis of source code.

References

WEBhttps://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json ADVISORYhttps://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf WEBhttps://sick.com/psirt ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2023-23448

CVSS Analysis

CVSS v3.1

5.3

Exploitability

Attack Vector

NetworkAV:N

Attack Complexity

LowAC:L

Privileges Required

NonePR:N

User Interaction

NoneUI:N

Scope

UnchangedS:U

Impact

Confidentiality

LowC:L

Integrity

NoneI:N

Availability

NoneA:N

5.3/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

Other

CWE-540

Ecosystems

Timeline

PublishedMay 15, 2023

ModifiedJan 23, 2025