CVE-2023-4420
Last modified
CVE-2023-4420 is a high-severity vulnerability rated 7.4/10 on the CVSS scale. A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. EPSS estimates a 0.24% chance of exploitation in the next 30 days.
Description
A remote unprivileged attacker can intercept the communication via e.g. Man-In-The-Middle, due to the absence of Transport Layer Security (TLS) in the SICK LMS5xx. This lack of encryption in the communication channel can lead to the unauthorized disclosure of sensitive information. The attacker can exploit this weakness to eavesdrop on the communication between the LMS5xx and the Client, and potentially manipulate the data being transmitted.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sick | Lms531 Firmware | All versions |
| Sick | Lms511 Firmware | All versions |
| Sick | Lms500 Firmware | All versions |
References
- https://sick.com/psirtVendor Advisory
- https://sick.com/psirtVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-4420?
How severe is CVE-2023-4420?
How do I fix CVE-2023-4420?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-44194 An Incorrect Default Permissions vulnerability in Juniper N…7.8
- CVE-2023-44195 An Improper Restriction of Communication Channel to Intende…5.3
- CVE-2023-44196 An Improper Check for Unusual or Exceptional Conditions in …6.5
- CVE-2023-44197 An Out-of-Bounds Write vulnerability in the Routing Protoco…7.5
- CVE-2023-44198 An Improper Check for Unusual or Exceptional Conditions vul…7.5
- CVE-2023-44199 An Improper Check for Unusual or Exceptional Conditions vul…7.5
- CVE-2023-44201 An Incorrect Permission Assignment for Critical Resource vu…5.5
- CVE-2023-44203 An Improper Check or Handling of Exceptional Conditions vul…6.5
- CVE-2023-44204 An Improper Validation of Syntactic Correctness of Input vu…6.5
- CVE-2023-44205Sensitive information disclosure due to improper authorizati…5.3
- CVE-2023-44206Sensitive information disclosure and manipulation due to imp…9.1
- CVE-2023-44207Stored cross-site scripting (XSS) vulnerability in protectio…5.4
Are you affected by CVE-2023-4420?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST