Read the docs
TI-2023-04078 Aliases CVE-2023-4418GHSA-xqcv-p45j-c72q

Uncontrolled resource consumption in SICK AG LMS5xx

Priority MEDIUM 40CWE-400Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-400.

Summary

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00845 58th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SICK AGLMS5xxall firmware versions and later—No fix listedCNA
  • LMS5xx VendorSICK AG Affected all firmware versions and later Fixed in — No fix listed CNA

CPE configurations NVD · 6

CPEVersionsRoleVendor
cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSICK AG
cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:*not specified by NVDRunning onSICK AG
cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSICK AG
cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*not specified by NVDRunning onSICK AG
cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:*all versionsVulnerableSICK AG
cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:*not specified by NVDRunning onSICK AG
  • cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
  • cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
  • cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
  • cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
  • cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
  • cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG

Remediation

No fixed version listed by the sources yet.

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    SICK LMS5xx — sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf

    4 records Highest priority Priority MEDIUM 3 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2023-04080 A remote unprivileged attacker can intercept the communication via e.g.Priority MEDIUM 49
    • TI-2023-04079 Hard-coded credentials in SICK AG LMS5xxPriority MEDIUM 45
    • TI-2023-15030 The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs.Priority LOW 39
    Show all 4 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-4418
  2. 2026-10-03 Alias added: GHSA-xqcv-p45j-c72q

References

Advisory 3

  • TI-2023-04080 A remote unprivileged attacker can intercept the communication via e.g. CVSS 3.1CRITICAL 9.8
  • TI-2023-04079 Hard-coded credentials in SICK AG LMS5xx CVSS 3.1CRITICAL 9.8
  • TI-2023-15030 The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. CVSS 3.1HIGH 7.5
  • TI-2020-01963 Improper handling of exceptional conditions in Bulkscan LMS111; Bulkscan LMS511; CLV62x… CVSS 3.1HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences