Vulnerabilities

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs.

A remote unprivileged attacker can intercept the communication via e.g.

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.