What’s Vulnerable › Vulnerabilities

CVE-2023-31412

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-24 · updated 2026-06-17
• Weakness: CWE-916

Description

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

Affected products

• SICK Lms500 Firmware: all versions
• SICK Lms511 Firmware: all versions
• SICK Lms531 Firmware: all versions

References

• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
• https://sick.com/psirt
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf
• https://sick.com/psirt

Get alerted when CVE-2023-31412 or the next vulnerability affects your stack