CVEvulnerability
CVE-2023-31409
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-05-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-400
Description
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.
Affected configurations
• sick ftmg-esd20axx firmware (< 2.0)
• sick ftmg-esd25axx firmware (< 2.0)
• sick ftmg-esn40sxx firmware (< 2.0)
• sick ftmg-esn50sxx firmware (< 2.0)
• sick ftmg-esr50sxx firmware (< 2.0)
• sick ftmg-esr40sxx firmware (< 2.0)
• sick ftmg-esd15axx firmware (< 2.0)
Related
Weakness · CWE (1)
- CWE-400 Uncontrolled Resource Consumption weakness
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf Vendor Advisory
- https://sick.com/psirt Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf Vendor Advisory
- https://sick.com/psirt Vendor Advisory