CVE-2023-4418: A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service...
7.5
CVSS
Description
A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.
Classification
CVE ID: CVE-2023-4418
CVSS Base Severity: HIGH
CVSS Base Score: 7.5
Affected Products
Vendor: SICK AG
Product: LMS5xx
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.12% (probability of being exploited)
EPSS Percentile: 46.67% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://sick.com/psirthttps://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json