CRITICAL🇵🇱 Wersja polska

CVE-2023-4419

CVSS 9.8v3.1pub. 2023-08-24upd. 2024-11-21

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sick Lms500

    HW
    Sick
    all versions

  • Sick Lms500 Firmware

    OS
    Sick
    all versions

  • Sick Lms511

    HW
    Sick
    all versions

  • Sick Lms511 Firmware

    OS
    Sick
    all versions

  • Sick Lms531

    HW
    Sick
    all versions

  • Sick Lms531 Firmware

    OS
    Sick
    all versions
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-4420CRITICAL9.8PL ✓same product

Brak szyfrowania TLS w urządzeniach SICK LMS5xx — przechwycenie komunikacji

CVE-2023-31412HIGH7.5same product

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker mana...

CVE-2023-4418HIGH7.5same product

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a ...

CVE-2020-2075HIGH7.5same product

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutio...

CVE-2026-22907CRITICAL9.9PL ✓same vendor

Nieautoryzowany dostęp do systemu plików hosta w SICK TDC-X401GL