high7.5

CVE-2020-2075

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV…

Impact

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Affected products

Vendor	Product	Affected versions
Sick	Lms111 Firmware	before 1.04 before 2.0
Sick	Lms511 Firmware	before 2.30 All versions
Sick	Clv620 Firmware	All versions
Sick	Clv622 Firmware	All versions
Sick	Clv621 Firmware	All versions
Sick	Icr890-3 Firmware	All versions
Sick	Msc800 Firmware	before 4.10
Sick	Rfh Firmware	All versions
Sick	Clv650 Firmware	All versions
Sick	Clv651 Firmware	All versions
Sick	Clv631 Firmware	All versions
Sick	Clv630 Firmware	All versions

Weakness classification

CWE-703 CWE-755

References

NVD record
CVE.org record
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories