Lucene search

SICK AGCVELIST:CVE-2023-4419

HistoryAug 24, 2023 - 6:08 p.m.

CVE-2023-4419

2023-08-2418:08:19

SICK AG

www.cve.org

lms5xx

hard-coded credentials

vulnerability

unauthorized

reconfiguration

disruption

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled
unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

CNA Affected

[
  {
    "defaultStatus": "affected",
    "product": "LMS5xx",
    "vendor": "SICK AG",
    "versions": [
      {
        "lessThan": " V2.21",
        "status": "affected",
        "version": "0",
        "versionType": "*"
      }
    ]
  }
]

References

sick.com/.well-known/csaf/white/2023/sca-2023-0007.json

sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf

sick.com/psirt

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

Related for CVELIST:CVE-2023-4419