Vulnerability · Published Aug 24, 2023 · Assigned by SICK AG
CVE-2023-4418
High 7.5
In plain English
A high-severity security flaw in LMS5xx from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.8%top 41.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
Affected products (as reported)
References
- https://sick.com/psirt issue-tracking
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf vendor-advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json x_csaf