CVE-2023-43697

The CVE-2023-43697 vulnerability affects the SICK APU RDT400 component, tied to MAID (Modification of Assumed-Immutable Data). An unprivileged, remote attacker can cause the site to fail loading necessary strings by changing file paths via HTTP requests, exposing a network-accessible impact with ...

CVE-2023-43698

Improper Neutralization of Input During Web Page Generation ’Cross-site Scripting’ in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website...

CVE-2023-43698

CVE-2023-43698 describes an XSS vulnerability in the SICK APU RDT400 component. The issue arises from improper neutralization of input during web page generation, allowing an unprivileged remote attacker to run arbitrary code in a client’s browser by injecting code into the website. The connected...

CVE-2023-43699

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited...

CVE-2023-43699

CVE-2023-43699 affects the SICK APU RDT400 (SICK Application Processing Unit). The vulnerability is an improper restriction of excessive authentication attempts, allowing an unprivileged remote attacker to guess passwords via trial-and-error because login attempts are not limited. Documents confi...

CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-43700

CVE-2023-43700 affects SICK APU: Missing Authorization in the RDT400 component allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is documented across multiple feeds (NVD, Red Hat, CVE lists, and related PSIRT entries) with consistent ...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43696

CVE-2023-43696 concerns the SICK Application Processing Unit (APU). The root cause is an improper access control on an FTP server that allows an unprivileged, remote attacker to both download and upload arbitrary files via anonymous access. The vulnerability is exploitable over the network with n...

Vulnerabilities in SICK Application Processing Unit

Vulnerabilities in SICK Application Processing Unit...

SICK APU Code Issue Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in SICK APU that stems from an improper access control vulnerability. The vulnerability can be exploited by an attacker to download files and upload arbitrary files via anonymous access to an FTP server...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400, which stems from a vulnerability that allows an attacker to guess passwords by trial and error when attempting to log in...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from an arbitrary file download vulnerability. The vulnerability can be exploited by an attacker to download arbitrary files from a server via HTTP requests...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that originates from a vulnerability that allows an attacker to change the path to a file using an HTTP request so that the site fails to load the necessary strings...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from insufficient control flow management of the device, which allows an attacker to enable hidden functionality via an HTTP request...

SICK APU Cross-Site Scripting Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from the presence of a cross-site scripting XSS vulnerability. An attacker could exploit the vulnerability to run arbitrary code in the client...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK Germany. A security vulnerability exists in the SICK APU RDT400 that stems from a lack of authorization checks. An attacker could exploit the vulnerability to modify data via an HTTP request...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...