CVEvulnerability
CVE-2023-31412
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-08-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-916
Description
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.
Affected configurations
• sick lms531 firmware
• sick lms511 firmware
• sick lms500 firmware
Related
Weakness · CWE (1)
- CWE-916 Use of Password Hash With Insufficient Computational Effort weakness
References
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf Vendor Advisory
- https://sick.com/psirt Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json Vendor Advisory
- https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf Vendor Advisory
- https://sick.com/psirt Vendor Advisory