CVE-2023-5103

Опубликовано: 09 окт. 2023

Источник: nvd

CVSS3: 4.3

EPSS Низкий

Описание

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.

Ссылки

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Vendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
Vendor Advisory
https://sick.com/psirt
Product

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sick:apu0200_firmware:*:*:*:*:*:*:*:*

Версия до 4.0.0.6 (исключая)

cpe:2.3:h:sick:apu0200:-:*:*:*:*:*:*:*

EPSS

Процентиль: 34%

0.00139

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-1021

Связанные уязвимости

GHSA-6jpv-79vc-wh3h

CVSS3: 4.3

github

больше 2 лет назад

EPSS

Процентиль: 34%

0.00139

Низкий

4.3 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

CWE-1021