CVE-2020-2075
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in...
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
- Record
CVE-2020-2075- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-703, CWE-755
- Updated
- 2026-11-02
CVE List No score
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
- Record
CVE-2020-2075- Weakness
- CWE-703
- Updated
- 2026-11-02
EUVDEUVD-2020-22101 No score
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
- Record
EUVD-2020-22101- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-2w82-h9hh-7q9j No score
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in...
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
- Record
GHSA-2w82-h9hh-7q9j- Updated
- 2026-11-02
Affected products
- sick clv620 firmware
- sick clv621 firmware
- sick clv622 firmware
- sick clv630 firmware
- sick clv631 firmware
- sick clv632 firmware
- sick clv640 firmware
- sick clv642 firmware
- sick clv650 firmware
- sick clv651 firmware
- sick icr890-3.5 firmware
- sick icr890-3 firmware
Show 18 moreShow less
- sick lms100 firmware
- sick lms101 firmware
- sick lms111 firmware
- sick lms121 firmware
- sick lms122 firmware
- sick lms123 firmware
- sick lms131 firmware
- sick lms133 firmware
- sick lms141 firmware
- sick lms142 firmware
- sick lms143 firmware
- sick lms151 firmware
- sick lms153 firmware
- sick lms500 firmware
- sick lms511 firmware
- sick lms531 firmware
- sick msc800 firmware
- sick rfh firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2020-2075 is a high vulnerability (CVSS 7.5) in Sick Clv620 Firmware, published August 31, 2020. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.43%, the 73rd percentile. No source names a fixed version.