CVE-2023-31409
Last modified
CVE-2023-31409 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.. EPSS estimates a 1.12% chance of exploitation in the next 30 days.
Description
Uncontrolled Resource Consumption in SICK FTMg AIR FLOW SENSOR with Partnumbers 1100214, 1100215, 1100216, 1120114, 1120116, 1122524, 1122526 allows an remote attacker to influence the availability of the webserver by invocing a Slowloris style attack via HTTP requests.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sick | Ftmg-Esd20axx Firmware | < 2.0 |
| Sick | Ftmg-Esd25axx Firmware | < 2.0 |
| Sick | Ftmg-Esn40sxx Firmware | < 2.0 |
| Sick | Ftmg-Esn50sxx Firmware | < 2.0 |
| Sick | Ftmg-Esr50sxx Firmware | < 2.0 |
| Sick | Ftmg-Esr40sxx Firmware | < 2.0 |
| Sick | Ftmg-Esd15axx Firmware | < 2.0 |
References
- https://sick.com/psirtVendor Advisory
- https://sick.com/psirtVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-31409?
How severe is CVE-2023-31409?
How do I fix CVE-2023-31409?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-31403SAP Business One installation - version 10.0, does not perfo…8
- CVE-2023-31404Under certain conditions, SAP BusinessObjects Business Intel…5
- CVE-2023-31405SAP NetWeaver AS for Java - versions ENGINEAPI 7.50, SERVERC…5.3
- CVE-2023-31406Due to insufficient input validation, SAP BusinessObjects Bu…6.1
- CVE-2023-31407SAP Business Planning and Consolidation - versions 740, 750,…5.4
- CVE-2023-31408Cleartext Storage of Sensitive Information in SICK FTMg AIR …7.5
- CVE-2023-3141A use-after-free flaw was found in r592_remove in drivers/me…7.1
- CVE-2023-31410A remote unprivileged attacker can intercept the communicati…7.4
- CVE-2023-31411A remote unprivileged attacker can modify and access configu…9.8
- CVE-2023-31412The LMS5xx uses weak hash generation methods, resulting in t…7.5
- CVE-2023-31413Filebeat versions through 7.17.9 and 8.6.2 have a flaw in ht…3.3
- CVE-2023-31414Kibana versions 8.0.0 through 8.7.0 contain an arbitrary cod…8.8
Are you affected by CVE-2023-31409?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST