Input validation

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited...

CVE-2023-5103

The CVE-2023-5103 issue affects SICK APU’s RDT400, where improper restriction of rendered UI layers or frames can allow an unprivileged remote attacker to disclose sensitive information by tricking a user into clicking an actionable item in an iframe. Documents consistently identify the affected ...

CVE-2023-5102

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests...

CVE-2023-5102

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests...

CVE-2023-5102

CVE-2023-5102 affects SICK APU’s RDT400 component. The root cause is insufficient control flow management, which could let an unprivileged remote attacker enable hidden functionality via HTTP requests. Impact is described as potential hidden functionality exposure. No public exploit details or re...

CVE-2023-5101

CVE-2023-5101 affects the SICK APU’s RDT400 component, where an unprivileged remote attacker can download various files from the server via HTTP requests. Public descriptions indicate an information-disclosure risk with low confidentiality impact (CVSS v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N; b...

CVE-2023-5100

CVE-2023-5100 describes cleartext transmission of sensitive information in the SICK APU RDT400, enabling an unprivileged remote attacker to retrieve data by intercepting unencrypted network traffic. The vulnerability affects the SICK APU RDT400 component; the root cause is plaintext communication...

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

CVE-2023-5100

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted...

CVE-2023-43697

Modification of Assumed-Immutable Data MAID in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

CVE-2023-43697

The CVE-2023-43697 vulnerability affects the SICK APU RDT400 component, tied to MAID (Modification of Assumed-Immutable Data). An unprivileged, remote attacker can cause the site to fail loading necessary strings by changing file paths via HTTP requests, exposing a network-accessible impact with ...

CVE-2023-43697

Modification of Assumed-Immutable Data MAID in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

CVE-2023-43698

Improper Neutralization of Input During Web Page Generation ’Cross-site Scripting’ in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website...

CVE-2023-43698

CVE-2023-43698 describes an XSS vulnerability in the SICK APU RDT400 component. The issue arises from improper neutralization of input during web page generation, allowing an unprivileged remote attacker to run arbitrary code in a client’s browser by injecting code into the website. The connected...

CVE-2023-43699

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited...

CVE-2023-43699

CVE-2023-43699 affects the SICK APU RDT400 (SICK Application Processing Unit). The vulnerability is an improper restriction of excessive authentication attempts, allowing an unprivileged remote attacker to guess passwords via trial-and-error because login attempts are not limited. Documents confi...

CVE-2023-43700

CVE-2023-43700 affects SICK APU: Missing Authorization in the RDT400 component allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is documented across multiple feeds (NVD, Red Hat, CVE lists, and related PSIRT entries) with consistent ...

CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...