Cleartext Transmission of Sensitive Information in RDT400 in SICK APU allows an unprivileged remote attacker to retrieve potentially sensitive information via intercepting network traffic that is not encrypted.
Solution:
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Link | Tags |
---|---|
https://sick.com/psirt | product issue tracking |
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.pdf | vendor advisory |
https://sick.com/.well-known/csaf/white/2023/sca-2023-0010.json | vendor advisory |