CVE-2023-5101

Summary

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.

Affected Software

Weaknesses

• CWE-552: CWE-552 Files or Directories Accessible to External Parties

ADP Enrichment

CVE Program Container

Additional References

• https://sick.com/psirt
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: partial

References

• https://sick.com/psirt
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

• ←Previous
• Next→