PT-2023-23306 · Lms5Xx · Lms5Xx

Jonathan Sarrazin · Publicado 2023-08-24 · Atualizado 2023-08-30 · CVE-2023-31412

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions LMS5xx (affected versions not specified)

Description The issue is related to weak hash generation methods used by the LMS5xx, resulting in the creation of insecure hashes. If an attacker retrieves the hash, it could lead to collision attacks and potentially allow the retrieval of the password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-916

Identificadores relacionados

CVE-2023-31412

Produtos afetados

Lms5Xx

Referências · 6

• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.pdf · Aviso do Fabricante
• https://sick.com/psirt · Aviso do Fabricante
• https://t.me/cibsecurity/69146 · Publicação no Telegram
• https://t.me/cvenotify/57199 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-31412 · Nota de Segurança
• https://sick.com/.well-known/csaf/white/2023/sca-2023-0007.json · Aviso do Fabricante