Medium · 5.3 CVE-2023-5102 EUVD-2023-57442GHSA-gxxp-j837-wmrj

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionalit…

Published Oct 9, 2023 · Updated Dec 9, 2024 · Assigned by SICK AG

Description

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.

Affected products

Vendor	Product	Affected	Fixed
SICK	APU0200	all versions	—

Advisories 1

SCA-2023-0010 Vulnerabilities in SICK Application Processing Unit SICK PSIRT · Oct 9, 2023

References

https://sick.com/psirt issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

CNA	v3.1	5.3
EUVD	v3.1	5.3