{"id":"CVE-2020-2075","aliases":["EUVD-2020-22101","GHSA-2w82-h9hh-7q9j"],"status":"published","title":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in...","description":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0143,"percentile":0.73208,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-703","CWE-755"],"published":"2020-08-31T17:09:07Z","modified":"2026-06-17T03:11:43Z","products":[{"vendor":"sick","product":"clv620_firmware"},{"vendor":"sick","product":"clv621_firmware"},{"vendor":"sick","product":"clv622_firmware"},{"vendor":"sick","product":"clv630_firmware"},{"vendor":"sick","product":"clv631_firmware"},{"vendor":"sick","product":"clv632_firmware"},{"vendor":"sick","product":"clv640_firmware"},{"vendor":"sick","product":"clv642_firmware"},{"vendor":"sick","product":"clv650_firmware"},{"vendor":"sick","product":"clv651_firmware"},{"vendor":"sick","product":"icr890-3.5_firmware"},{"vendor":"sick","product":"icr890-3_firmware"},{"vendor":"sick","product":"lms100_firmware"},{"vendor":"sick","product":"lms101_firmware"},{"vendor":"sick","product":"lms111_firmware"},{"vendor":"sick","product":"lms121_firmware"},{"vendor":"sick","product":"lms122_firmware"},{"vendor":"sick","product":"lms123_firmware"},{"vendor":"sick","product":"lms131_firmware"},{"vendor":"sick","product":"lms133_firmware"},{"vendor":"sick","product":"lms141_firmware"},{"vendor":"sick","product":"lms142_firmware"},{"vendor":"sick","product":"lms143_firmware"},{"vendor":"sick","product":"lms151_firmware"},{"vendor":"sick","product":"lms153_firmware"},{"vendor":"sick","product":"lms500_firmware"},{"vendor":"sick","product":"lms511_firmware"},{"vendor":"sick","product":"lms531_firmware"},{"vendor":"sick","product":"msc800_firmware"},{"vendor":"sick","product":"rfh_firmware"}],"references":[{"url":"https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-2075"},{"url":"https://github.com/advisories/GHSA-2w82-h9hh-7q9j"}],"sources":{"cve":[{"id":"CVE-2020-2075","description":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.","status":"published","published":"2020-08-31T17:09:07Z","modified":"2024-08-04T06:54:00.593Z","cwes":["CWE-703"],"updated_at":"2026-11-02T14:35:51.563355Z"}],"euvd":[{"id":"EUVD-2020-22101","description":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.","status":"published","published":"2020-08-31T17:09:07Z","modified":"2024-08-04T06:54:00Z","updated_at":"2026-11-03T03:08:10.95725Z"}],"ghsa":[{"id":"GHSA-2w82-h9hh-7q9j","title":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in...","description":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.","status":"published","published":"2022-05-24T22:28:05Z","modified":"2023-01-30T05:05:15Z","updated_at":"2026-11-02T14:47:13.933319Z"}],"nvd":[{"id":"CVE-2020-2075","description":"Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.","status":"published","published":"2020-08-31T18:15:13.17Z","modified":"2026-06-17T03:11:43.533Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-703","CWE-755"],"updated_at":"2026-11-02T14:06:13.600965Z"}]}}