AF
Product
Apu0200 Firmware
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 6Low 0
Watch
Add Apu0200 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-43696 | 9.8 | Oct 9 | Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server Affected: before 4.0.0.6 |
| CVE-2023-43700 | 7.5 | Oct 9 | Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication Affected: before 4.0.0.6 |
| CVE-2023-43699 | 7.5 | Oct 9 | Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login… Affected: before 4.0.0.6 |
| CVE-2023-5100 | 6.5 | Oct 9 | Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network… Affected: before 4.0.0.6 |
| CVE-2023-43697 | 6.5 | Oct 9 | Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file… Affected: before 4.0.0.6 |
| CVE-2023-43698 | 6.1 | Oct 9 | Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the… Affected: before 4.0.0.6 |
| CVE-2023-5102 | 5.3 | Oct 9 | Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests Affected: before 4.0.0.6 |
| CVE-2023-5101 | 5.3 | Oct 9 | Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests Affected: before 4.0.0.6 |
| CVE-2023-5103 | 4.3 | Oct 9 | Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user… Affected: before 4.0.0.6 |
Showing 9