2023-05-15 14:00:26 +02:00
{
"id" : "CVE-2023-23447" ,
"sourceIdentifier" : "psirt@sick.de" ,
"published" : "2023-05-15T11:15:09.217" ,
2023-05-25 14:00:38 +00:00
"lastModified" : "2023-05-25T13:17:58.103" ,
"vulnStatus" : "Analyzed" ,
2023-05-15 14:00:26 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "\nUncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an unprivileged\nremote attacker to influence the availability of the webserver by invocing several open file requests via\nthe REST interface.\n\n"
}
] ,
"metrics" : {
"cvssMetricV31" : [
2023-05-25 14:00:38 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
} ,
2023-05-15 14:00:26 +02:00
{
"source" : "psirt@sick.de" ,
"type" : "Secondary" ,
"cvssData" : {
"version" : "3.1" ,
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" ,
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "NONE" ,
"availabilityImpact" : "HIGH" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH"
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
]
} ,
"weaknesses" : [
2023-05-25 14:00:38 +00:00
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-400"
}
]
} ,
2023-05-15 14:00:26 +02:00
{
"source" : "psirt@sick.de" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-400"
}
]
}
] ,
2023-05-25 14:00:38 +00:00
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esd20axx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "E3882685-8678-47E4-995C-C3F6D9AD5668"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esd20axx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "16AD808F-900B-41EE-B90A-F9D67AAAD6BE"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esd25axx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "49D930E8-415C-4183-87A1-8D7F44247B67"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esd25axx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "24618A95-328C-47C9-B8EF-B4DF6E65D68E"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esn40sxx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "1DCC9C0B-7CCE-44E5-B25D-67BF971B4541"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esn40sxx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "290B016B-20B7-40C1-B825-6ED4774C4861"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esn50sxx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "E23D6018-1DFB-4516-82C9-3A3B09C2CBF9"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esn50sxx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "1B113D9E-8E61-4F9C-9E5B-2030EEFB133B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esr50sxx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "77F2683F-B1B5-4033-97D4-ADF77B6B50E8"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esr50sxx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A02547D3-5E40-41B3-A7B4-D63F60A5F80B"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esr40sxx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "9075A02A-C627-43DA-ACF7-776197B518C5"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esr40sxx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B887993-18A8-493F-97A1-A788FBD5A5B9"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:sick:ftmg-esd15axx_firmware:*:*:*:*:*:*:*:*" ,
"versionEndExcluding" : "2.0" ,
"matchCriteriaId" : "E9219CD8-34CE-45A2-904A-E7B1740706C2"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:sick:ftmg-esd15axx:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "FF162AA9-6645-4032-8D29-BAE2D60FBD9B"
}
]
}
]
}
] ,
2023-05-15 14:00:26 +02:00
"references" : [
{
"url" : "https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json" ,
2023-05-25 14:00:38 +00:00
"source" : "psirt@sick.de" ,
"tags" : [
"Vendor Advisory"
]
2023-05-15 14:00:26 +02:00
} ,
{
"url" : "https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf" ,
2023-05-25 14:00:38 +00:00
"source" : "psirt@sick.de" ,
"tags" : [
"Vendor Advisory"
]
2023-05-15 14:00:26 +02:00
} ,
{
"url" : "https://sick.com/psirt" ,
2023-05-25 14:00:38 +00:00
"source" : "psirt@sick.de" ,
"tags" : [
"Vendor Advisory"
]
2023-05-15 14:00:26 +02:00
}
]
}
