Skip to content
OpenAdvisories
Medium SCA-2022-0003 2 CVEs

Vulnerabilities in SICK FTMg

Published Mar 31, 2022 · Updated Mar 31, 2022 · Revision 3

Vendor: SICK Product: FTMg Product: FTMg Firmware

Summary

SICK received a report about multiple security vulnerabilities in the SICK FTMg device.

Currently SICK is not aware of any public exploits specifically targeting any of the vulnerabilities.

SICK has released a new version of the SICK FTMg firmware and recommends updating
to the newest version.

Vulnerabilities 2

  • Unscored —
    CVE-2021-32503

    Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance user…

  • Unscored —
    CVE-2021-32504

    Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance user…

Revision history

  1. #3

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #2

    Updated Advisory (only visual changes)

  3. #1

    Initial Release

References