CVE-2023-5100: Cleartext Transmission of Sensitive Information

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

CVE-2023-5102: Insufficient Control Flow Management

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests...

CVE-2023-5103: Improper Restriction of Rendered UI Layers or Frames

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe...

CVE-2023-43696: Improper Access Control

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43698: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation ’Cross-site Scripting’ in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website...

SICK APU Cross-Site Scripting Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from the presence of a cross-site scripting XSS vulnerability. An attacker could exploit the vulnerability to run arbitrary code in the client...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400, which stems from a vulnerability that allows an attacker to guess passwords by trial and error when attempting to log in...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that originates from a vulnerability that allows an attacker to change the path to a file using an HTTP request so that the site fails to load the necessary strings...

PT-2023-28917

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited due to improper restriction of excessive authentication...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...

PT-2023-28918

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is due to missing authorization in RDT400. Recommendations At the...

PT-2023-31735

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description Insufficient Control Flow Management in RDT400 allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests. Recommendations At the moment, there is no...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK Germany. A security vulnerability exists in the SICK APU RDT400 that stems from a lack of authorization checks. An attacker could exploit the vulnerability to modify data via an HTTP request...

SICK APU Code Issue Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in SICK APU that stems from an improper access control vulnerability. The vulnerability can be exploited by an attacker to download files and upload arbitrary files via anonymous access to an FTP server...

PT-2023-31722 · Sick · Sick Apu

Name of the Vulnerable Software and Affected Versions: SICK APU affected versions not specified Description: The issue allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted. This is due to the cleartext...

Vulnerability in SICK SIM1012

To allow full programmability of the SICK SIM1012, all Ethernet ports are open by factory default. If unused ports are not closed, this could potentially allow a remote, unauthenticated attacker to impact the availability, confidentiality, and integrity of the SICK SIM1012. SICK is not aware of a...

Vulnerability in Wibu-Systems CodeMeter Runtime affects multiple SICK products

Wibu-Systems disclosed a security vulnerability in the CodeMeter Runtime. There is a heap buffer overflow vulnerability which can potentially lead to a remote code execution. Currently, no PoC is known to Wibu-Systems. To exploit the heap overflow, additional protection mechanisms need to be...

PT-2023-32009 · Sick · Sim1012

Name of the Vulnerable Software and Affected Versions: SICK SIM1012 affected versions not specified Description: A remote unauthorized attacker may connect to the SIM1012, interact with the device, and change configuration settings. The adversary may also reset the SIM and, in the worst case,...

SICK SIM1012 Security Vulnerability

SICK SIM Series is a series of sensor integrators from SICK, Germany. A security vulnerability exists in the SICK SIM1012. An attacker could use this vulnerability to interact with the device and change configuration settings...

Vulnerabilities in SICK LMS5xx

SICK received a report about multiple vulnerabilities in the SICK LMS5xx, that can be accessed via Ethernet. If exploited, this potentially allows a remote unauthenticated attacker to impact availabiltiy, integrity and confidentaility of the LMS5xx. SICK recommends making sure to run the product ...