CVE-2020-2075
High
Description
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
SeverityHigh
CVSS7.5
Exploit probability—
ProductSick Lms111 Firmware
PublishedAug 31, 2020
First seenAug 31, 2020
Weakness typeCWE-703CWE-703
How to fix
Update
- sick lms111_firmware1.04, 2.0 or later
- sick lms511_firmware2.30 or later
- sick msc800_firmware4.10 or later
- sick lms100_firmware2.0 or later
- sick lms101_firmware2.0 or later
- sick lms153_firmware2.0 or later
- sick lms151_firmware2.0 or later
- sick lms133_firmware2.10 or later
- sick lms142_firmware2.10 or later
- sick lms143_firmware2.10 or later
- sick lms131_firmware2.10 or later
- sick lms121_firmware2.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sick lms111_firmware | v < 1.04, v < 2.0 | 1.04, 2.0 |
| sick lms511_firmware | v < 2.30, No range specified | 2.30 |
| sick clv620_firmware | No range specified | — |
| sick clv622_firmware | No range specified | — |
| sick clv621_firmware | No range specified | — |
| sick icr890-3_firmware | No range specified | — |
| sick msc800_firmware | v < 4.10 | 4.10 |
| sick rfh_firmware | No range specified | — |
| sick clv650_firmware | No range specified | — |
| sick clv651_firmware | No range specified | — |
| sick clv631_firmware | No range specified | — |
| sick clv630_firmware | No range specified | — |
| sick clv632_firmware | No range specified | — |
| sick clv640_firmware | No range specified | — |
| sick clv642_firmware | No range specified | — |
| sick lms100_firmware | v < 2.0 | 2.0 |
| sick lms101_firmware | v < 2.0 | 2.0 |
| sick lms153_firmware | v < 2.0 | 2.0 |
| sick lms151_firmware | v < 2.0 | 2.0 |
| sick lms133_firmware | v < 2.10 | 2.10 |
| sick lms142_firmware | v < 2.10 | 2.10 |
| sick lms143_firmware | v < 2.10 | 2.10 |
| sick lms131_firmware | v < 2.10 | 2.10 |
| sick lms121_firmware | v < 2.10 | 2.10 |
| sick lms123_firmware | v < 2.10 | 2.10 |
| sick lms122_firmware | v < 2.10 | 2.10 |
| sick lms141_firmware | v < 2.10 | 2.10 |
| sick lms531_firmware | No range specified | — |
| sick lms500_firmware | No range specified | — |
| sick icr890-3.5_firmware | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.