CVE-2023-4419: The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt...
9.8
CVSS
Description
The LMS5xx uses hard-coded credentials, which potentially allow low-skilled
unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.
Classification
CVE ID: CVE-2023-4419
CVSS Base Severity: CRITICAL
CVSS Base Score: 9.8
Affected Products
Vendor: SICK AG
Product: LMS5xx
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.21% (probability of being exploited)
EPSS Percentile: 58.9% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)
References
https://sick.com/psirthttps://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json