CVE-2023-5102

low-risk

Published 2023-10-09

Insufficient Control Flow Management in RDT400 in SICK APU allows an unprivileged remote attacker to potentially enable hidden functionality via HTTP requests.

Do I need to act?

0.18% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 5.3/10 Medium

NETWORK / LOW complexity

Affected Products (1)

Apu0200 Firmware

Affected Vendors

Sick

References (6)

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Product https://sick.com/psirt

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json

Vendor Advisory https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf

Product https://sick.com/psirt

/ 100

low-risk

Severity 21/34 · High

Exploitability 1/34 · Minimal

Exposure 5/34 · Minimal