CVE-2020-2075

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x  CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
SICK AGCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 39%
VendorProductVersion
sicklms111_firmware
𝑥
< 1.04
sicklms511_firmware
𝑥
< 2.30
sickclv620_firmware
*
sickclv622_firmware
*
sickclv621_firmware
*
sickicr890-3_firmware
*
sickmsc800_firmware
𝑥
< 4.10
sickrfh_firmware
*
sickclv650_firmware
*
sickclv651_firmware
*
sickclv631_firmware
*
sickclv630_firmware
*
sickclv632_firmware
*
sickclv640_firmware
*
sickclv642_firmware
*
sicklms100_firmware
𝑥
< 2.0
sicklms101_firmware
𝑥
< 2.0
sicklms111_firmware
𝑥
< 2.0
sicklms153_firmware
𝑥
< 2.0
sicklms151_firmware
𝑥
< 2.0
sicklms133_firmware
𝑥
< 2.10
sicklms142_firmware
𝑥
< 2.10
sicklms143_firmware
𝑥
< 2.10
sicklms131_firmware
𝑥
< 2.10
sicklms121_firmware
𝑥
< 2.10
sicklms123_firmware
𝑥
< 2.10
sicklms122_firmware
𝑥
< 2.10
sicklms141_firmware
𝑥
< 2.10
sicklms511_firmware
*
sicklms531_firmware
*
sicklms500_firmware
*
sickicr890-3.5_firmware
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories