Description
Unauthenticated users can access sensitive web URLs through GET request, which should be restricted to maintenance users only. A malicious attacker could use this sensitive information’s to launch further attacks on the system.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | SICK FTMg | All versions before 2.8 | — |
Advisories 1
- SCA-2022-0003 Vulnerabilities in SICK FTMg SICK PSIRT · Mar 31, 2022