CVE-2023-31412

HIGH

SICK LMS5xx Firmware - Use of Password Hash With Insufficient Computational Effort

Title source: llm
STIX 2.1

Description

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

References (3)

Core 3
Core References
Vendor Advisory issue-tracking
https://sick.com/psirt

Scores

CVSS v3 7.5
EPSS 0.0034
EPSS Percentile 26.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-916
Status published
Products (4)
sick/lms500_firmware
sick/lms511_firmware
sick/lms531_firmware
SICK AG/LMS5xx all firmware versions
Published Aug 24, 2023
Tracked Since Feb 18, 2026