CVE-2023-43700

Опубликовано: 09 окт. 2023

Источник: nvd

CVSS3: 7.7

CVSS3: 7.5

EPSS Низкий

Описание

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.

Ссылки

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sick:apu0200_firmware:*:*:*:*:*:*:*:*

Версия до 4.0.0.6 (исключая)

cpe:2.3:h:sick:apu0200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 41%

0.00193

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-5m5g-f66j-5469

CVSS3: 7.7

github

больше 2 лет назад

Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.

EPSS

Процентиль: 41%

0.00193

Низкий

7.7 High

CVSS3

7.5 High

CVSS3

Дефекты

CWE-862