Lucene search

SICK AGCVELIST:CVE-2023-4418

HistoryAug 24, 2023 - 6:05 p.m.

CVE-2023-4418

2023-08-2418:05:15

SICK AG

www.cve.org

remote attacker

lms5xx

tcp syn attack

ddos

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.3%

JSON

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "LMS5xx",
    "vendor": "SICK AG",
    "versions": [
      {
        "status": "affected",
        "version": "all firmware versions"
      }
    ]
  }
]

References

sick.com/.well-known/csaf/white/2023/sca-2023-0007.json

sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf

sick.com/psirt

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.3%

JSON

Related for CVELIST:CVE-2023-4418