Lucene search

[email protected]CVE-2023-43700

HistoryOct 09, 2023 - 12:15 p.m.

CVE-2023-43700

2023-10-0912:15:10

CWE-862

[email protected]

web.nvd.nist.gov

cve-2023-43700

authorization

rdt400

sick apu

remote attacker

data modification

http requests

authentication

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.

Affected configurations

NVD

Node

sickapu0200_firmwareRange<4.0.0.6

AND

sickapu0200Match-

CPENameOperatorVersion
sick:apu0200_firmwaresick apu0200 firmwarelt4.0.0.6

CPE	Name	Operator	Version
sick:apu0200_firmware	sick apu0200 firmware	lt	4.0.0.6

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "APU0200",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

References

sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

sick.com/psirt

7.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:H

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.5%

JSON

Related for CVE-2023-43700

prion1 nvd1 cvelist1