Input validation

2023-10-0913:15:00

PRIOn knowledge base

www.prio-n.com

input validation

remote attacker

sensitive information

clicking

iframe

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into
clicking on an actionable item using an iframe.

CPENameOperatorVersion
apu0200_firmwarelt4.0.0.6

CPE	Name	Operator	Version
	apu0200_firmware	lt	4.0.0.6

References

sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

sick.com/psirt