Advisories · Technology

SICK AG APU0200.

Every CVE that names SICK AG APU0200 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2023-5103 CVE record

CVSS 4.3 Medium

Clickjacking in SICK AG APU0200
- SICK AG APU0200
- CWE-1021
Not analysed yet 9 Oct 2023
CVE-2023-5102 CVE record

CVSS 5.3 Medium

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.
- SICK AG APU0200
- CWE-691
Not analysed yet 9 Oct 2023
CVE-2023-5101 CVE record

CVSS 5.3 Medium

Files accessible to external parties in SICK AG APU0200
- SICK AG APU0200
- Information disclosure
Not analysed yet 9 Oct 2023
CVE-2023-5100 CVE record

CVSS 5.9 Medium

Cleartext transmission of sensitive information in SICK AG APU0200
- SICK AG APU0200
- Weak cryptography or TLS
Not analysed yet 9 Oct 2023
CVE-2023-43697 CVE record

CVSS 6.5 Medium

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP request…
- SICK AG APU0200
- CWE-471
Not analysed yet 9 Oct 2023
CVE-2023-43698 CVE record

CVSS 7.1 High

Cross-site scripting in SICK AG APU0200
- SICK AG APU0200
- Cross-site scripting (XSS)
Not analysed yet 9 Oct 2023
CVE-2023-43699 CVE record

CVSS 7.5 High

Unlimited authentication attempts in SICK AG APU0200
- SICK AG APU0200
- Authentication bypass
Not analysed yet 9 Oct 2023
CVE-2023-43700 CVE record

CVSS 7.7 High

Missing authorization in SICK AG APU0200
- SICK AG APU0200
- Broken access control
Not analysed yet 9 Oct 2023
CVE-2023-43696 CVE record

CVSS 8.2 High

Improper access control in SICK AG APU0200
- SICK AG APU0200
- Broken access control
Not analysed yet 9 Oct 2023