Lucene search
SICK AGCVELIST:CVE-2023-31412HistoryAug 24, 2023 - 6:15 p.m.
CVE-2023-31412
2023-08-2418:15:53
SICK AG
www.cve.org
lms5xx
weak hash generation
collision attacks
password retrieval
cve-2023-31412
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.3%
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "LMS5xx",
"vendor": "SICK AG",
"versions": [
{
"status": "affected",
"version": "all firmware versions"
}
]
}
]Related
cve
cve
CVE-2023-31412
2023-08-24 19:15:33
nvd
nvd
CVE-2023-31412
2023-08-24 19:15:33
prion
prion
Design/Logic Flaw
2023-08-24 19:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
28.3%
Related for CVELIST:CVE-2023-31412