CVE-2023-5100

EPSS 0.08%
Veröffentlicht 09.10.2023 13:15:10
Zuletzt bearbeitet 21.11.2024 08:41:03
Quelle psirt@sick.de
CVE-Watchlists
Login
Unerledigt
Login

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an
unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic
that is not encrypted.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sick ≫ Apu0200 Firmware Version < 4.0.0.6

Sick ≫ Apu0200 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.229

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
psirt@sick.de	5.9	1.6	4.2	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N

CWE-319 Cleartext Transmission of Sensitive Information

The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

https://sick.com/psirt

Product

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-5100

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-5100

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-5100

EUVD