CVE-2023-5100
5.9
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
Summary
Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SICK AG | APU0200 | all versions | affected |
Weaknesses
- CWE-319: CWE-319 Cleartext Transmission of Sensitive Information
ADP Enrichment
CVE Program Container
Additional References
- https://sick.com/psirt
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: partial
References
- https://sick.com/psirt
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.