CVE-2023-4418
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
Published:Aug 24, 2023
Last Modified:Dec 9, 2024
EPS:Aug 24, 2023
EPSS Score:0.00113
CVSS Score:7.5
Affected Products
Vendor
Product
Action
Vendor
Sick
Product
Lms500
Sick
Lms500
Vendor
Sick
Product
Lms500 Firmware
Sick
Lms500 Firmware
Vendor
Sick
Product
Lms511
Sick
Lms511
Vendor
Sick
Product
Lms511 Firmware
Sick
Lms511 Firmware
Vendor
Sick
Product
Lms531
Sick
Lms531
Vendor
Sick
Product
Lms531 Firmware
Sick
Lms531 Firmware
Vendor
Sick
Product
Lms5xx
Sick
Lms5xx
Exploits
No exploit reference
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
Related CVEs
References
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
