CVE-2023-23449: Sick Ftmg-ESD15AXX Firmware

Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Observable Response Discrepancy in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to gain information about valid usernames by analyzing challenge responses from the server via the REST interface.

Affected products

• Sick Ftmg-ESD15AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESD20AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESD25AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESN40SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESN50SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESR40SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESR50SXX Firmware: before 2.0 (fixed in 2.0)

Published 2023-05-15. Last modified 2026-06-17.