Improper UI Layer Restriction in RDT400 by SICK
CVE-2023-5103
4.3MEDIUM
Summary
The RDT400 product by SICK is susceptible to a vulnerability that allows an unprivileged remote attacker to potentially expose sensitive information. This is achievable by deceiving users into interacting with actionable elements embedded within an iframe. Such an attack can lead to unauthorized access to sensitive data, thereby posing a significant security risk to users and organizations relying on this product.
Affected Version(s)
APU0200 all versions
References
CVSS V3.1
Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved