CVE-2023-4420

🗓️ 24 Aug 2023 18:11:39Reported by SICK AGType

A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information

Reporter	Title	Published	Views	Family All 11
ATTACKERKB	CVE-2023-4420	24 Aug 202319:15	–	attackerkb
Circl	CVE-2023-4420	24 Aug 202322:13	–	circl
CNNVD	SICK LMS5xx 安全漏洞	24 Aug 202300:00	–	cnnvd
Cvelist	CVE-2023-4420	24 Aug 202318:11	–	cvelist
EUVD	EUVD-2023-54283	3 Oct 202520:07	–	euvd
NVD	CVE-2023-4420	24 Aug 202319:15	–	nvd
Prion	Design/Logic Flaw	24 Aug 202319:15	–	prion
Positive Technologies	PT-2023-29148 · Sick · Sick Lms5Xx	24 Aug 202300:00	–	ptsecurity
RedhatCVE	CVE-2023-4420	9 Jan 202608:57	–	redhatcve
Sick AG	Vulnerabilities in SICK LMS5xx	25 Aug 202311:00	–	sick

NVD

Node

sick lms531_firmware

AND

sick lms531Match-

Node

sick lms511_firmware

AND

sick lms511Match-

Node

sick lms500_firmware

AND

sick lms500Match-

[
  {
    "vendor": "SICK AG",
    "product": "LMS5xx",
    "versions": [
      {
        "status": "affected",
        "version": "all firmware versions"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
sick	www.sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
sick	www.sick.com/psirt
sick	www.sick.com/.well-known/csaf/white/2023/sca-2023-0007.json

01 Jun 2026 12:15Current

7.2High risk

Vulners AI Score7.2

CVSS 3.17.4 - 9.8

EPSS0.00083

SSVC

CWE-311