Skip to content
OpenAdvisories
High SCA-2023-0010 9 CVEs

Vulnerabilities in SICK Application Processing Unit

Published Oct 9, 2023 · Updated Oct 9, 2023 · Revision 3

Vendor: SICK Product: APU0200

Vulnerabilities 9

  • High 8.2
    CVE-2023-43696

    Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary file…

    SICK APU0200
  • High 7.7
    CVE-2023-43700

    Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests tha…

    SICK APU0200
  • High 7.5
    CVE-2023-43699

    Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker …

    SICK APU0200
  • High 7.1
    CVE-2023-43698

    Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an un…

    SICK APU0200
  • Medium 6.5
    CVE-2023-43697

    Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the …

    SICK APU0200
  • Medium 5.9
    CVE-2023-5100

    Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retriev…

    SICK APU0200
  • Medium 5.3
    CVE-2023-5101

    Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to dow…

    SICK APU0200
  • Medium 5.3
    CVE-2023-5102

    Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable…

    SICK APU0200
  • Medium 4.3
    CVE-2023-5103

    Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to po…

    SICK APU0200

Revision history

  1. #3

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #2

    Added self reference in CSAF

  3. #1

    Initial Release

References