Skip to content
OpenAdvisories
High · 7.5 CVE-2023-4418 EUVD-2023-54281GHSA-xqcv-p45j-c72q

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-servi…

Published Aug 24, 2023 · Updated Jun 1, 2026 · Assigned by SICK AG

Description

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack.
By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

Affected products

VendorProductAffectedFixed
SICK LMS5xx all firmware versions —

Advisories 1

References