CVE-2023-5103

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Improper Restriction of Rendered UI Layers or Frames in RDT400 in SICK APU allows an unprivileged remote attacker to potentially reveal sensitive information via tricking a user into clicking on an actionable item using an iframe.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-1021

Affected software

Vendor	Product	Versions
SICK AG	APU0200	all versions

References

https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
https://sick.com/psirtProduct
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.jsonVendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdfVendor Advisory
https://sick.com/psirtProduct

Timeline

Published: Oct 9, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-510339.8TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi setOpModeCfg interface.CVE-2023-510349.8TOTOlink EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution via the cstecgi.cgi UploadFirmwareFile interface.CVE-2023-510359.8TOTOLINK EX1200L V9.3.5u.6146_B20201023 is vulnerable to arbitrary command execution on the cstecgi.cgi NTPSyncWithHost interface.CVE-2023-51046.5Improper Input Validation in GitHub repository nocodb/nocodb prior to 0.96.0.CVE-2023-510427.8In the Linux kernel before 6.4.12, amdgpu_cs_wait_all_fences in drivers/gpu/drm/amd/amdgpu/amdgpu_cs.c has a fence use-after-free.CVE-2023-510437.0In the Linux kernel before 6.4.5, drivers/gpu/drm/drm_atomic.c has a use-after-free during a race condition between a nonblocking atomic com CVE-2023-510489.8S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.CVE-2023-510499.8S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.CVE-2023-51056.5The Frontend File Manager Plugin WordPress plugin before 22.6 has a vulnerability that allows an Editor+ user to bypass the file download lo CVE-2023-510509.8S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.CVE-2023-510519.8S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.CVE-2023-510529.8S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.