CVE-2023-31408: Sick Ftmg-ESD15AXX Firmware

High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows a remote attacker to potentially steal user credentials that are stored in the user’s browsers local storage via cross-site-scripting attacks.

Affected products

• Sick Ftmg-ESD15AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESD20AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESD25AXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESN40SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESN50SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESR40SXX Firmware: before 2.0 (fixed in 2.0)
• Sick Ftmg-ESR50SXX Firmware: before 2.0 (fixed in 2.0)

Published 2023-05-15. Last modified 2026-06-17.