CVE-2023-43697

Modification of Assumed-Immutable Data MAID in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from insufficient control flow management of the device, which allows an attacker to enable hidden functionality via an HTTP request...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...

PT-2023-31724

Name of the Vulnerable Software and Affected Versions SICK APU RDT400 affected versions not specified Description The issue allows an unprivileged remote attacker to download various files from the server via HTTP requests. Recommendations At the moment, there is no information about a newer...

PT-2023-28916

Name of the Vulnerable Software and Affected Versions SICK APU RDT400 affected versions not specified Description The issue allows an unprivileged remote attacker to run arbitrary code in the client's browser via injecting code into the website. This is due to improper neutralization of input...