Lucene search

K
nvd[email protected]NVD:CVE-2023-4418
HistoryAug 24, 2023 - 7:15 p.m.

CVE-2023-4418

2023-08-2419:15:42
CWE-400
web.nvd.nist.gov
remote attacker
unprivileged
tcp syn
denial-of-service
flood
resources
unresponsive
availability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.4%

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

Affected configurations

NVD
Node
sicklms531Match-
AND
sicklms531_firmware
Node
sicklms511Match-
AND
sicklms511_firmware
Node
sicklms500Match-
AND
sicklms500_firmware

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

21.4%

Related for NVD:CVE-2023-4418