CVE-2023-4419 — CRITICAL (9.8)

Vulnerability Description

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Sick	Lms531 Firmware	All versions
Sick	Lms531	-
Sick	Lms511 Firmware	All versions
Sick	Lms511	-
Sick	Lms500 Firmware	All versions
Sick	Lms500	-

Related Weaknesses (CWE)

CWE-798

References

https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.jsonVendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdfVendor Advisory
https://sick.com/psirtVendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.jsonVendor Advisory
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdfVendor Advisory
https://sick.com/psirtVendor Advisory

FAQ

What is CVE-2023-4419?

CVE-2023-4419 is a vulnerability with a CVSS score of 9.8 (CRITICAL). The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

How severe is CVE-2023-4419?

CVE-2023-4419 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2023-4419?

Check the references section above for vendor advisories and patch information. Affected products include: Sick Lms531 Firmware, Sick Lms531, Sick Lms511 Firmware, Sick Lms511, Sick Lms500 Firmware.