Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-4418

Опубликовано: 24 авг. 2023
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:*
Конфигурация 2

Одновременно

cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*
Конфигурация 3

Одновременно

cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:*

EPSS

Процентиль: 30%
0.00113
Низкий

7.5 High

CVSS3

Дефекты

CWE-400

Связанные уязвимости

CVSS3: 7.5
github
больше 2 лет назад

A remote unprivileged attacker can sent multiple packages to the LMS5xx to disrupt its availability through a TCP SYN-based denial-of-service (DDoS) attack. By exploiting this vulnerability, an attacker can flood the targeted LMS5xx with a high volume of TCP SYN requests, overwhelming its resources and causing it to become unresponsive or unavailable for legitimate users.

EPSS

Процентиль: 30%
0.00113
Низкий

7.5 High

CVSS3

Дефекты

CWE-400