First published: Mon Oct 09 2023(Updated: )
Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.
Credit: psirt@sick.de psirt@sick.de
Affected Software | Affected Version | How to fix |
---|---|---|
Sick Apu0200 Firmware | <4.0.0.6 | |
Sick Apu0200 | ||
All of | ||
Sick Apu0200 Firmware | <4.0.0.6 | |
Sick Apu0200 |
The recommended solution is to update the image to a version >= 4.0.0.6 as soon as possible.
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2023-5101 is medium with a CVSS score of 5.3.
An unprivileged remote attacker can exploit CVE-2023-5101 by downloading various files from the server via HTTP requests.
SICK APU0200 Firmware versions up to and excluding 4.0.0.6 are affected by CVE-2023-5101.
To fix or mitigate CVE-2023-5101, update the SICK APU0200 Firmware to a version later than 4.0.0.6.
More information about CVE-2023-5101 can be found at the following references: [link1](https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json), [link2](https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf), [link3](https://sick.com/psirt).