CVE-2023-43700

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication...

CVE-2023-43700

CVE-2023-43700 affects SICK APU: Missing Authorization in the RDT400 component allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is documented across multiple feeds (NVD, Red Hat, CVE lists, and related PSIRT entries) with consistent ...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43696

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server...

CVE-2023-43696

CVE-2023-43696 concerns the SICK Application Processing Unit (APU). The root cause is an improper access control on an FTP server that allows an unprivileged, remote attacker to both download and upload arbitrary files via anonymous access. The vulnerability is exploitable over the network with n...

Vulnerabilities in SICK Application Processing Unit

Vulnerabilities in SICK Application Processing Unit...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from insufficient control flow management of the device, which allows an attacker to enable hidden functionality via an HTTP request...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK Germany. A security vulnerability exists in the SICK APU RDT400 that originated from allowing an attacker to disclose sensitive information by tricking a user...

PT-2023-31744 · Sick · Sick Apu Rdt400

Name of the Vulnerable Software and Affected Versions: SICK APU RDT400 affected versions not specified Description: The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to...

SICK APU Code Issue Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in SICK APU that stems from an improper access control vulnerability. The vulnerability can be exploited by an attacker to download files and upload arbitrary files via anonymous access to an FTP server...

SICK APU RDT400 Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400, which stems from a vulnerability that allows an attacker to guess passwords by trial and error when attempting to log in...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK Germany. A security vulnerability exists in the SICK APU RDT400 that stems from a lack of authorization checks. An attacker could exploit the vulnerability to modify data via an HTTP request...

SICK APU Cross-Site Scripting Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that stems from the presence of a cross-site scripting XSS vulnerability. An attacker could exploit the vulnerability to run arbitrary code in the client...

SICK APU Security Vulnerability

SICK APU is a railroad analysis system from SICK, Germany. A security vulnerability exists in the SICK APU RDT400 that originates from a vulnerability that allows an attacker to change the path to a file using an HTTP request so that the site fails to load the necessary strings...

PT-2023-28916

Name of the Vulnerable Software and Affected Versions SICK APU RDT400 affected versions not specified Description The issue allows an unprivileged remote attacker to run arbitrary code in the client's browser via injecting code into the website. This is due to improper neutralization of input...

PT-2023-28918

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to modify data via HTTP requests that do not require authentication. This is due to missing authorization in RDT400. Recommendations At the...

PT-2023-28917

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited due to improper restriction of excessive authentication...

PT-2023-31724

Name of the Vulnerable Software and Affected Versions SICK APU RDT400 affected versions not specified Description The issue allows an unprivileged remote attacker to download various files from the server via HTTP requests. Recommendations At the moment, there is no information about a newer...

PT-2023-28915

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description Modification of Assumed-Immutable Data MAID in RDT400 allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests...

PT-2023-28914

Name of the Vulnerable Software and Affected Versions SICK APU affected versions not specified Description The issue allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the "FTP server". Recommendations At the moment, there is no informatio...