CVE-2023-5100

low-risk

Published 2023-10-09

Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.9/10 Medium

NETWORK / HIGH complexity

Affected Products (1)

Apu0200 Firmware

Affected Vendors

Sick

References (6)

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Product https://sick.com/psirt

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Product https://sick.com/psirt

/ 100

low-risk

Severity 18/34 · Moderate

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal