Vulnerability Details CVE-2023-4418
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.2%
CVSS Severity
CVSS v3 Score 7.5
References
Products affected by CVE-2023-4418
-
cpe:2.3:h:sick:lms500:-
-
cpe:2.3:h:sick:lms511:-
-
cpe:2.3:h:sick:lms531:-
-
cpe:2.3:o:sick:lms500_firmware:-
-
cpe:2.3:o:sick:lms511_firmware:-
-
cpe:2.3:o:sick:lms511_firmware:2.30
-
cpe:2.3:o:sick:lms531_firmware:-