Vulnerabilities > Sick > Apu0200 Firmware > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-09 CVE-2023-43697 Unspecified vulnerability in Sick Apu0200 Firmware
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.
network
low complexity
sick
6.5
2023-10-09 CVE-2023-43698 Cross-site Scripting vulnerability in Sick Apu0200 Firmware
Improper Neutralization of Input During Web Page Generation (’Cross-site Scripting’) in RDT400 in SICK APU allows an unprivileged remote attacker to run arbitrary code in the clients browser via injecting code into the website.
network
low complexity
sick CWE-79
6.1
2023-10-09 CVE-2023-5100 Cleartext Transmission of Sensitive Information vulnerability in Sick Apu0200 Firmware
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.
network
low complexity
sick CWE-319
6.5
2023-10-09 CVE-2023-5101 Files or Directories Accessible to External Parties vulnerability in Sick Apu0200 Firmware
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.
network
low complexity
sick CWE-552
5.3
2023-10-09 CVE-2023-5102 Unspecified vulnerability in Sick Apu0200 Firmware
Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.
network
low complexity
sick
5.3
2023-10-09 CVE-2023-5103 Improper Restriction of Rendered UI Layers or Frames vulnerability in Sick Apu0200 Firmware
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.
network
low complexity
sick CWE-1021
4.3