LF
Product
Lms500 Firmware
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 5Medium 0Low 0
Watch
Add Lms500 Firmware to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-4419 | 8.8 | Aug 24 | The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device Affected: All versions, or not specified |
| CVE-2023-4418 | 7.5 | Aug 24 | A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack Affected: All versions, or not specified |
| CVE-2023-31412 | 7.5 | Aug 24 | The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs Affected: All versions, or not specified |
| CVE-2020-2075 | 7.5 | Aug 31 | Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3,… Affected: All versions, or not specified |
| CVE-2023-4420 | 7.4 | Aug 24 | A remote unprivileged attacker can intercept the communication via e.g Affected: All versions, or not specified |
Showing 5