{"id":"CVE-2023-31412","state":"PUBLISHED","title":"The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the p","description":"The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.","publishedAt":"2023-08-24T18:15:53.835Z","updatedAt":"2026-06-01T07:29:07.317Z","severity":{"score":7.5,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","source":"SICK AG"},"assigner":"SICK AG","products":["SICK AG LMS5xx"],"affected":[{"vendor":"SICK AG","product":"LMS5xx","defaultStatus":"affected","versions":[{"version":"all firmware versions","status":"affected"}]}],"references":["https://sick.com/psirt","https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf","https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:00.499Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/31xxx/CVE-2023-31412.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2023-31412","state":"PUBLISHED","datePublished":"2023-08-24T18:15:53.835Z","dateUpdated":"2026-06-01T07:29:07.317Z","assignerShortName":"SICK AG","assignerOrgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","dateReserved":"2023-04-27T18:35:47.418Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password."}],"affected":[{"vendor":"SICK AG","product":"LMS5xx","defaultStatus":"affected","versions":[{"version":"all firmware versions","status":"affected"}]}],"references":[{"url":"https://sick.com/psirt","tags":["issue-tracking"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf","tags":["vendor-advisory"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json","tags":["x_csaf"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"HIGH","baseScore":7.5,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"Use of Weak Hash"}]}],"providerMetadata":{"shortName":"SICK AG","orgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","dateUpdated":"2026-06-01T07:29:07.317Z"},"workarounds":[{"lang":"en","value":"Please make sure that you apply general security practices when operating the LMS5xx. The following General Security Practices and Operating Guidelines could mitigate the associated security risk. It is also recommended to apply the security practices listed in the LMS5xx hardening guide.","supportingMedia":[{"type":"text/html","base64":false,"value":"Please make sure that you apply general security practices when operating the LMS5xx. The following General Security Practices and Operating Guidelines could mitigate the associated security risk. It is also recommended to apply the security practices listed in the LMS5xx hardening guide."}]}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://sick.com/psirt","tags":["issue-tracking","x_transferred"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf","tags":["vendor-advisory","x_transferred"]},{"url":"https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json","tags":["x_csaf","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T14:53:30.758Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"sick","product":"lms5xx","defaultStatus":"unknown","versions":[{"version":"0","status":"affected","lessThan":"*","versionType":"custom"}],"cpes":["cpe:2.3:h:sick:lms5xx:*:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-10-02T19:15:26.979357Z","id":"CVE-2023-31412","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-12-09T14:12:04.011Z"}}]}}}