CVE-2023-5101

Published: Oct 9, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

Files or Directories Accessible to External Parties in RDT400 in SICK APU allows an unprivileged remote attacker to download various files from the server via HTTP requests.

Affected (1)

Products: Sick: Apu0200 Firmware

Sick

1 product

Apu0200 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Apu0200 Firmware	Before 4.0.0.6

Running on/with	Platform Versions
Sick Apu0200	All versions

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (6)

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Source: psirt@sick.de

Vendor Advisory

https://sick.com/psirt

Source: psirt@sick.de

Product

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.