VulnerabilityModified
CVE-2023-43697
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.
MEDIUM 6.5EPSS 0.65%
Does this matter?
Lower severity and a low EPSS score (0.65%). Track it; it rarely justifies an emergency change on its own.
Description
Modification of Assumed-Immutable Data (MAID) in RDT400 in SICK APU allows an unprivileged remote attacker to make the site unable to load necessary strings via changing file paths using HTTP requests.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
- EPSS
- 0.65% probability · 49th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-471
- Affected
- sick/apu0200 firmware
- Source
- psirt@sick.de
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.