Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-4418

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SICK AG

Description

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SICK AG LMS5xx

Default version status: affected

  • all firmware versionsaffected

References