A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
References
| Link | Resource |
|---|---|
| https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json | Vendor Advisory |
| https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf | Vendor Advisory |
| https://sick.com/psirt | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
30 Aug 2023, 14:41
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
Sick lms500
Sick lms511 Firmware Sick lms511 Sick lms500 Firmware Sick lms531 Firmware Sick Sick lms531 |
|
| CPE | cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:* cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:* cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:* cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:* |
|
| CWE | CWE-400 | |
| References | (MISC) https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json - Vendor Advisory | |
| References | (MISC) https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf - Vendor Advisory | |
| References | (MISC) https://sick.com/psirt - Vendor Advisory |
24 Aug 2023, 19:55
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-24 19:15
Updated : 2023-12-10 15:14
NVD link : CVE-2023-4418
Mitre link : CVE-2023-4418
CVE.ORG link : CVE-2023-4418
JSON object : View
Products Affected
sick
- lms511
- lms511_firmware
- lms531_firmware
- lms500_firmware
- lms531
- lms500
CWE
CWE-400
Uncontrolled Resource Consumption