PT-2023-31744 · Sick · Sick Apu Rdt400

Published 2023-10-09 · Updated 2023-10-11 · CVE-2023-5103

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions SICK APU RDT400 (affected versions not specified)

Description The issue allows an unprivileged remote attacker to potentially reveal sensitive information by tricking a user into clicking on an actionable item using an iframe. This is due to improper restriction of rendered UI layers or frames in RDT400.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Weakness Enumeration

CWE-1021

Related Identifiers

CVE-2023-5103

Affected Products

Sick Apu Rdt400

References · 7

• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-5103 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5103 · Security Note
• https://sick.com/psirt · Note
• https://t.me/cibsecurity/71835 · Telegram Post
• https://twitter.com/CVEnew/status/1711358617067069804 · Twitter Post