CVE Catalog

CVE-2023-4419

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.69%

48th percentile - higher than 48% of all known CVEs

Summary

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and/or disrupt the functionality of the device.

Risk Assessment

The organization may be exposed to unauthorized changes in device configuration, potentially leading to disruptions in its operation.

Recommendation

It is recommended to remove hard-coded credentials and implement strong, unique authentication mechanisms.

Original NVD description (English source)

The LMS5xx uses hard-coded credentials, which potentially allow low-skilled unauthorized remote attackers to reconfigure settings and /or disrupt the functionality of the device.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS