Vulnerability Description
Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Sick | Apu0200 Firmware | < 4.0.0.6 |
| Sick | Apu0200 | - |
Related Weaknesses (CWE)
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
- https://sick.com/psirtProduct
FAQ
What is CVE-2023-5103?
CVE-2023-5103 is a vulnerability with a CVSS score of 4.3 (MEDIUM). Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an ac...
How severe is CVE-2023-5103?
CVE-2023-5103 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-5103?
Check the references section above for vendor advisories and patch information. Affected products include: Sick Apu0200 Firmware, Sick Apu0200.