CVE-2023-4418

The CVE-2023-4418 issue affects the SICK LMS5xx family, where a remote unauthenticated attacker can induce a TCP SYN flood to exhaust resources and render the LMS5xx unavailable. Several connected documents confirm a network-based DoS via TCP SYN requests impacting availability, with PT-2023-2914...

CVE-2023-4420

CVE-2023-4420 affects SICK LMS5xx devices. The vulnerability arises from the absence of Transport Layer Security, leaving the communication channel unencrypted and allowing a remote unprivileged attacker to eavesdrop and potentially manipulate data between LMS5xx and the client. Impacts include c...

CVE-2023-4419

CVE-2023-4419 affects the SICK LMS5xx family, stemming from hard-coded credentials that could allow a remote, unauthenticated attacker to reconfigure settings or disrupt device functionality. Root cause: hard-coded credentials enabling privileged access. Impact per sources: high/critical confiden...

CVE-2020-2075

CVE-2020-2075 concerns the Platform mechanism AutoIP used in SICK devices (e.g., Bulkscan LMS111/LMS511, CLV62x–CLV65x, ICR890-3, LMS10x/LMS11x/LMS15x/LMS12x/LMS13x/LMS14x/LMS5xx/LMS53x, MSC800, RFH). The vulnerability allows remote attackers to reboot the device by sending a crafted network pack...

CVE-2023-31412

The CVE-2023-31412 issue affects the LMS5xx family, where weak hash generation produces insecure hashes. If an attacker obtains a hash, a collision attack could enable password retrieval. Documents from NVD/Red Hat/SICK PSIRT confirm the vulnerability and indicate risk components (network exposur...