Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan…

Description

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Scores

EPSS (exploitation in 30 days)

1.4% · top 27% of all CVEs (7 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.

Weakness

• CWE-703: Improper Check or Handling of Exceptional Conditions (opens in a new tab)All about CWE-703 and its CVEs
• CWE-755 (opens in a new tab)All about CWE-755 and its CVEs

Affected products

• Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH

  • affected All Versions < V1.04
  • affected All Versions < V2.30
  • affected All versions with Ethernet interface
  • affected All ICR890-3 and ICR890-3.5 devices all versions
  • affected All Versions < V2.0
  • affected All Versions < V2.10
  • affected All versions
  • affected All Versions < V4.10

References (1)

• https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2020-2075](https://trackcve.app/badge/CVE-2020-2075.svg)](https://trackcve.app/cve/CVE-2020-2075)

Record last updated 4 Aug 2024, 06:54 UTC.