CVEvulnerability

CVE-2020-2075

7.5 HIGH Published 2020-08-31 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-08-31
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-703, CWE-755

Description

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Affected configurations

• sick lms111 firmware (< 1.04) • sick lms511 firmware (< 2.30) • sick clv620 firmware • sick clv622 firmware • sick clv621 firmware • sick icr890-3 firmware • sick msc800 firmware (< 4.10) • sick rfh firmware • sick clv650 firmware • sick clv651 firmware • sick clv631 firmware • sick clv630 firmware • sick clv632 firmware • sick clv640 firmware • sick clv642 firmware • sick lms100 firmware (< 2.0) • sick lms101 firmware (< 2.0) • sick lms111 firmware (< 2.0) • sick lms153 firmware (< 2.0) • sick lms151 firmware (< 2.0) • sick lms133 firmware (< 2.10) • sick lms142 firmware (< 2.10) • sick lms143 firmware (< 2.10) • sick lms131 firmware (< 2.10) • sick lms121 firmware (< 2.10) • sick lms123 firmware (< 2.10) • sick lms122 firmware (< 2.10) • sick lms141 firmware (< 2.10) • sick lms511 firmware • sick lms531 firmware • sick lms500 firmware • sick icr890-3.5 firmware

Related

Weakness · CWE (2)

  • CWE-703 Improper Check or Handling of Exceptional Conditions weakness
  • CWE-755 Improper Handling of Exceptional Conditions weakness

References