Improper UI Layer Restriction in RDT400 by SICK
CVE-2023-5103

4.3MEDIUM

Key Information:

Vendor

Sick Ag

Status
Apu0200
Vendor
CVE Published:
9 October 2023

What is CVE-2023-5103?

The RDT400 product by SICK is susceptible to a vulnerability that allows an unprivileged remote attacker to potentially expose sensitive information. This is achievable by deceiving users into interacting with actionable elements embedded within an iframe. Such an attack can lead to unauthorized access to sensitive data, thereby posing a significant security risk to users and organizations relying on this product.

Affected Version(s)

APU0200 all versions

References

https://sick.com/psirt
issue-tracking
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
vendor-advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-001...
x_csaf

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.