CveMateVulnerability intelligence

SICK AG Apu0200 vulnerabilities

9 vulnerabilities

Known vulnerabilities in SICK AG Apu0200, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

CVE-2023-43698sick agapu0200+13y ago09-10-2023 12:01

Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website.CVE-2023-43700sick agapu0200+13y ago09-10-2023 11:56

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.CVE-2023-43696sick agapu0200+13y ago09-10-2023 11:51

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server.CVE-2023-43697sick agapu0200+13y ago09-10-2023 12:03

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.CVE-2023-43699sick agapu0200+13y ago09-10-2023 11:59

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited.CVE-2023-5103sick agapu0200+13y ago09-10-2023 12:11

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.CVE-2023-5101sick agapu0200+13y ago09-10-2023 12:07

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.CVE-2023-5102sick agapu0200+13y ago09-10-2023 12:09

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.CVE-2023-5100sick agapu0200+13y ago09-10-2023 12:05

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.