CVE-2023-31412

Published: Aug 24, 2023Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

Affected (3)

Products: Sick: Lms531 Firmware, Lms511 Firmware, Lms500 Firmware

3 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Lms531 Firmware	All versions

Running on/with	Platform Versions
Sick Lms531	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Lms511 Firmware	All versions

Running on/with	Platform Versions
Sick Lms511	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sick Lms500 Firmware	All versions

Running on/with	Platform Versions
Sick Lms500	All versions

Related CWEs

CWE-916

Use of Password Hash With Insufficient Computational Effort

The product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.

References (6)

https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf

Source: psirt@sick.de

Vendor Advisory

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://sick.com/psirt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.