CVE-2023-31412: sick ag lms5xx

Vulnerability summary

CVE-2023-31412 is a high (CVSS 7.5) vulnerability in sick ag lms5xx. EPSS estimates a 0.42% chance of exploitation in the next 30 days, higher than 35.3% of scored vulnerabilities.

Timeline

1. 24-08-2023
   PublishedVulnerability first disclosed.
2. 01-06-2026
   Last modifiedVulnerability information updated.

Description

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker manages to retrieve the hash, it could lead to collision attacks and the potential retrieval of the password.

• CWE-916Use of Password Hash With Insufficient Computational EffortThe product generates a hash for a password, but it uses a scheme that does not provide a sufficient level of computational effort that would make password cracking attacks infeasible or expensive.