High severity · published Aug 31, 2020
CVE-2020-2075
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3,…
7.5
CVSS
1.4%
EPSS
No
On KEV
Description
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CF
Clv620 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv621 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv622 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv630 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv631 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv632 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv640 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv642 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv650 Firmware · Sick
All versions, or not specified · source: NVD
CF
Clv651 Firmware · Sick
All versions, or not specified · source: NVD
IF
Icr890-3 Firmware · Sick
All versions, or not specified · source: NVD
IF
Icr890-3.5 Firmware · Sick
All versions, or not specified · source: NVD