CVEvulnerability
CVE-2023-5101
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-09
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-552
Description
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an
unprivileged remote attacker to download various files from the server via HTTP requests.
Affected configurations
• sick apu0200 firmware (< 4.0.0.6)
Related
Weakness · CWE (1)
- CWE-552 Files or Directories Accessible to External Parties weakness
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf Vendor Advisory
- https://sick.com/psirt Product
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf Vendor Advisory
- https://sick.com/psirt Product