VulnerabilityModified
CVE-2023-5103
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.
MEDIUM 4.3EPSS 0.45%
Does this matter?
Lower severity and a low EPSS score (0.45%). Track it; it rarely justifies an emergency change on its own.
Description
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.
- CVSS 3.1
- 4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
- EPSS
- 0.45% probability · 38th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-1021
- Affected
- sick/apu0200 firmware
- Source
- psirt@sick.de
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.