CVE-2023-43696: Sick APU0200 Firmware

Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper Access Control in SICK APU allows an unprivileged remote attacker to download as well as upload arbitrary files via anonymous access to the FTP server.

Affected products

• Sick APU0200 Firmware: before 4.0.0.6 (fixed in 4.0.0.6)

Published 2023-10-09. Last modified 2026-06-17.