Insufficient Control Flow Management in RDT400 by SICK
CVE-2023-5102

5.3MEDIUM

Key Information:

Vendor
Sick Ag
Status
Apu0200
Vendor
CVE Published:
9 October 2023

Summary

The vulnerability in RDT400 from SICK APU allows an unprivileged remote attacker to exploit insufficient control flow management. By crafting specific HTTP requests, the attacker may enable hidden functionalities, potentially compromising the integrity and confidentiality of the system. It is crucial for users of RDT400 to apply necessary mitigations and stay informed about security advisories from SICK.

Affected Version(s)

APU0200 all versions

References

https://sick.com/psirt
issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
x_csaf

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.