Lucene search
SICK AGCVELIST:CVE-2023-43699HistoryOct 09, 2023 - 11:59 a.m.
CVE-2023-43699
2023-10-0911:59:19
CWE-307
SICK AG
www.cve.org
cve-2023-43699
improper restriction
excessive authentication attempts
sick apu
rdt400
remote attacker
guess password
trial-and-error
login attempts
not limited
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
40.5%
Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU
allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts
are not limited.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "APU0200",
"vendor": "SICK AG",
"versions": [
{
"status": "affected",
"version": "all versions"
}
]
}
]Related
prion
prion
Input validation
2023-10-09 12:15:00
cve
cve
CVE-2023-43699
2023-10-09 12:15:10
nvd
nvd
CVE-2023-43699
2023-10-09 12:15:10
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
40.5%
Related for CVELIST:CVE-2023-43699