CVE-2023-31412: The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could...
7.5
CVSS
Description
The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.
Classification
CVE ID: CVE-2023-31412
CVSS Base Severity: HIGH
CVSS Base Score: 7.5
Affected Products
Vendor: SICK AG
Product: LMS5xx
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.14% (probability of being exploited)
EPSS Percentile: 49.9% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://sick.com/psirthttps://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json