exploitDog

CVE-2023-43697

Опубликовано: 09 окт. 2023

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.

Ссылки

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sick:apu0200_firmware:*:*:*:*:*:*:*:*

Версия до 4.0.0.6 (исключая)

cpe:2.3:h:sick:apu0200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 57%

0.00354

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-471

NVD-CWE-Other

Связанные уязвимости

GHSA-q553-9g48-gqqp

CVSS3: 6.5

github

больше 2 лет назад

Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.

EPSS

Процентиль: 57%

0.00354

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-471

NVD-CWE-Other