APU0200 vulnerabilities

3 known vulnerabilities in APU0200 from SICK. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  APU0200: Missing Authorization

  CVE-2023-43700Oct 9, 2023SICK

  Missing Authorization in RDT400 in SICK APU allows an unprivileged remote attacker to modify data via HTTP requests that no not require authentication.

• 7.5 High severity

  APU0200: Improper Restriction of Excessive Authentication Attempts

  CVE-2023-43699Oct 9, 2023SICK

  Improper Restriction of Excessive Authentication Attempts in RDT400 in SICK APU allows an unprivileged remote attacker to guess the password via trial-and-error as the login attempts are not limited.

• 9.8 Critical severity

  APU0200: Unrestricted Upload of File with Dangerous Type

  CVE-2023-43696Oct 9, 2023SICK

  Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server.