Sensitive Information Exposure in SICK APU RDT400
CVE-2023-5100

5.9MEDIUM

Key Information:

Vendor

Sick Ag

Status
Apu0200
Vendor
CVE Published:
9 October 2023

What is CVE-2023-5100?

The RDT400 in SICK APU is susceptible to a vulnerability that allows unprivileged remote attackers to intercept and access potentially sensitive information transmitted over unencrypted network traffic. This cleartext transmission can lead to unauthorized data exposure, making it essential for users to ensure appropriate security measures are in place to safeguard sensitive information during transmission.

Affected Version(s)

APU0200 all versions

References

https://sick.com/psirt
issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
x_csaf

CVSS V3.1

Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.