CVE-2023-43700

CVE-2023-43700 affects SICK APU: Missing Authorization in the RDT400 component allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is documented across multiple feeds (NVD, Red Hat, CVE lists, and related PSIRT entries) with consistent ...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43696

CVE-2023-43696 concerns the SICK Application Processing Unit (APU). The root cause is an improper access control on an FTP server that allows an unprivileged, remote attacker to both download and upload arbitrary files via anonymous access. The vulnerability is exploitable over the network with n...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

PT-2023-31722 · Sick · Sick Apu

Name of the Vulnerable Software and Affected Versions: SICK APU affected versions not specified Description: The issue allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted. This is due to the cleartext...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from an arbitrary file download vulnerability. The vulnerability can be exploited by an attacker to download arbitrary files from a server via HTTP requests...

SICK APU Cross-Site Scripting Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from the presence of a cross-site scripting XSS vulnerability. An attacker could exploit the vulnerability to run arbitrary code in the client...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from insufficient control flow management of the device, which allows an attacker to enable hidden functionality via an HTTP request...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that originates from a vulnerability that allows an attacker to change the path to a file using an HTTP request so that the site fails to load the necessary strings...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400, which stems from a vulnerability that allows an attacker to guess passwords by trial and error when attempting to log in...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK Germany. A security vulnerability exists in the SICK APU RDT400 that stems from a lack of authorization checks. An attacker could exploit the vulnerability to modify data via an HTTP request...