What’s Vulnerable › Vulnerabilities

CVE-2020-2075

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-08-31 · updated 2026-06-17
• Weakness: CWE-703

Description

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Affected products

• SICK Clv620 Firmware: all versions
• SICK Clv621 Firmware: all versions
• SICK Clv622 Firmware: all versions
• SICK Clv630 Firmware: all versions
• SICK Clv631 Firmware: all versions
• SICK Clv632 Firmware: all versions
• SICK Clv640 Firmware: all versions
• SICK Clv642 Firmware: all versions
• SICK Clv650 Firmware: all versions
• SICK Clv651 Firmware: all versions
• SICK Icr890-3.5 Firmware: all versions
• SICK Icr890-3 Firmware: all versions
• SICK Lms100 Firmware: before 2.0 — fixed in 2.0
• SICK Lms101 Firmware: before 2.0 — fixed in 2.0
• SICK Lms111 Firmware: before 1.04; before 2.0 — fixed in 1.04, 2.0
• SICK Lms121 Firmware: before 2.10 — fixed in 2.10
• SICK Lms122 Firmware: before 2.10 — fixed in 2.10
• SICK Lms123 Firmware: before 2.10 — fixed in 2.10
• SICK Lms131 Firmware: before 2.10 — fixed in 2.10
• SICK Lms133 Firmware: before 2.10 — fixed in 2.10
• SICK Lms141 Firmware: before 2.10 — fixed in 2.10
• SICK Lms142 Firmware: before 2.10 — fixed in 2.10
• SICK Lms143 Firmware: before 2.10 — fixed in 2.10
• SICK Lms151 Firmware: before 2.0 — fixed in 2.0
• SICK Lms153 Firmware: before 2.0 — fixed in 2.0
• SICK Lms500 Firmware: all versions
• SICK Lms511 Firmware: before 2.30 — fixed in 2.30
• SICK Lms531 Firmware: all versions
• SICK MSC800: before 4.10 — fixed in 4.10
• SICK Rfh Firmware: all versions

How to fix

Upgrade to a fixed version: SICK Lms100 Firmware 2.0; SICK Lms101 Firmware 2.0; SICK Lms111 Firmware 1.04, 2.0; SICK Lms121 Firmware 2.10; SICK Lms122 Firmware 2.10; SICK Lms123 Firmware 2.10; SICK Lms131 Firmware 2.10; SICK Lms133 Firmware 2.10; SICK Lms141 Firmware 2.10; SICK Lms142 Firmware 2.10; SICK Lms143 Firmware 2.10; SICK Lms151 Firmware 2.0. Check the vendor advisory for mitigations.

References

• https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories
• https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories

Get alerted when CVE-2020-2075 or the next vulnerability affects your stack