CVE-2023-43699: High severity sick apu0200 firmware vulnerability

Published Oct 9, 2023

Updated

Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited.

Affected Software

2 affected components

SICK Apu0200 Firmware<4.0.0.6

SICK Apu0200

Remediation

Information

The recommended solution is to update the image to a version >= 4.0.0.6 as soon as possible.

Event History

Oct 9, 2023

CVE Published

via MITRE·11:59 AM

Data Sourced

via MITRE·11:59 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-43699?

CVE-2023-43699 is a vulnerability in the SICK APU that allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited.

What is the severity of CVE-2023-43699?

The severity of CVE-2023-43699 is high with a severity score of 7.5.

What software is affected by CVE-2023-43699?

The Sick Apu0200 Firmware version up to exclusive 4.0.0.6 is affected by CVE-2023-43699.

How can an attacker exploit CVE-2023-43699?

An unprivileged remote attacker can exploit CVE-2023-43699 by attempting to guess the password via trial-and-error as the login attempts are not limited.

How can CVE-2023-43699 be fixed?

To fix CVE-2023-43699, it is recommended to update the Sick Apu0200 Firmware to a version beyond 4.0.0.6 to restrict excessive authentication attempts.