Lucene search

K
nvd[email protected]NVD:CVE-2023-43699
HistoryOct 09, 2023 - 12:15 p.m.

CVE-2023-43699

2023-10-0912:15:10
CWE-307
web.nvd.nist.gov
cve-2023-43699
remote attacker
password guessing

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.5%

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU
allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts
are not limited.

Affected configurations

NVD
Node
sickapu0200_firmwareRange<4.0.0.6
AND
sickapu0200Match-

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

40.5%

Related for NVD:CVE-2023-43699