High · 7.7 CVE-2023-43700 EUVD-2023-48081GHSA-5m5g-f66j-5469

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require aut…

Published Oct 9, 2023 · Updated Sep 19, 2024 · Assigned by SICK AG

Description

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.

Affected products

Vendor	Product	Affected	Fixed
SICK	APU0200	all versions	—

Advisories 1

SCA-2023-0010 Vulnerabilities in SICK Application Processing Unit SICK PSIRT · Oct 9, 2023

References

https://sick.com/psirt issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

CNA	v3.1	7.7
EUVD	v3.1	7.7