Lucene search

[email protected]CVE-2023-5100

HistoryOct 09, 2023 - 1:15 p.m.

CVE-2023-5100

2023-10-0913:15:10

CWE-319

[email protected]

web.nvd.nist.gov

cve-2023-5100

information security

rdt400

sick apu

cleartext transmission

network traffic

encryption

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an
unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic
that is not encrypted.

Affected configurations

NVD

Node

sickapu0200Match-

AND

sickapu0200_firmwareRange<4.0.0.6

CPENameOperatorVersion
sick:apu0200_firmwaresick apu0200 firmwarelt4.0.0.6

CPE	Name	Operator	Version
sick:apu0200_firmware	sick apu0200 firmware	lt	4.0.0.6

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "APU0200",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "all versions"
      }
    ]
  }
]

References

sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

sick.com/psirt

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

Related for CVE-2023-5100

prion1 nvd1 cvelist1