CVEvulnerability
CVE-2023-43697
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- Weaknesses
- CWE-471
Description
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an
unprivileged remote attacker to make the site unable to load necessary strings via changing file paths
using HTTP requests.
Affected configurations
• sick apu0200 firmware (< 4.0.0.6)
Related
Weakness · CWE (1)
- CWE-471 Modification of Assumed-Immutable Data (MAID) weakness
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf Vendor Advisory
- https://sick.com/psirt Product
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf Vendor Advisory
- https://sick.com/psirt Product