CVE record · CVE-2023-23447

Uncontrolled resource consumption in SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR and others

CVSS 7.5 HighEPSS 0.011 · 66th percentile

Published by the CVE Program (CNA: SICK AG) at 15 May 2023, 10:53 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
SICK AG	SICK FTMG-ESD15AXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESD20AXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESD25AXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESN40SXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESN50SXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESR40SXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected
SICK AG	SICK FTMG-ESR50SXX AIR FLOW SENSOR	affected before v3.0.0.131.Release * Other versions: affected

Identifiers: CVE-2023-23447
CNA: SICK AG
Weakness (CWE): CWE-400
Tags: SICK AG SICK FTMG-ESD15AXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESD20AXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESD25AXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESN40SXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESN50SXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESR40SXX AIR FLOW SENSOR
SICK AG SICK FTMG-ESR50SXX AIR FLOW SENSOR
Denial of service
Published: 15 May 2023
Updated: 1 Jun 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
7.5	High	3.1	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	CNA (SICK AG)

CISA KEV Not listed.
EPSS 0.011, the 66th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 15 May 2023. New records show when each source confirmed them.

Sources

References from the CNA

sick.com/psirt issue-tracking
sick.com/.well-known/csaf/white/2023/sca-2023-0004.pdf vendor-advisory
sick.com/.well-known/csaf/white/2023/sca-2023-0004.json csaf

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.