HIGH🇵🇱 Wersja polska

CVE-2020-2075

CVSS 7.5v3.1pub. 2020-08-31upd. 2024-11-21

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

  • Sick Clv620

    HW
    Sick
    all versions

  • Sick Clv620 Firmware

    OS
    Sick
    all versions

  • Sick Clv621

    HW
    Sick
    all versions

  • Sick Clv621 Firmware

    OS
    Sick
    all versions

  • Sick Clv622

    HW
    Sick
    all versions

  • Sick Clv622 Firmware

    OS
    Sick
    all versions

  • Sick Clv630

    HW
    Sick
    all versions

  • Sick Clv630 Firmware

    OS
    Sick
    all versions

  • Sick Clv631

    HW
    Sick
    all versions

  • Sick Clv631 Firmware

    OS
    Sick
    all versions

  • Sick Clv632

    HW
    Sick
    all versions

  • Sick Clv632 Firmware

    OS
    Sick
    all versions

  • Sick Clv640

    HW
    Sick
    all versions

  • Sick Clv640 Firmware

    OS
    Sick
    all versions

  • Sick Clv642

    HW
    Sick
    all versions

  • Sick Clv642 Firmware

    OS
    Sick
    all versions

  • Sick Clv650

    HW
    Sick
    all versions

  • Sick Clv650 Firmware

    OS
    Sick
    all versions

  • Sick Clv651

    HW
    Sick
    all versions

  • Sick Clv651 Firmware

    OS
    Sick
    all versions

  • Sick Icr890 3

    HW
    Sick
    all versions

  • Sick Icr890 3.5

    HW
    Sick
    all versions

  • Sick Icr890 3.5 Firmware

    OS
    Sick
    all versions

  • Sick Icr890 3 Firmware

    OS
    Sick
    all versions

  • Sick Lms100

    HW
    Sick
    all versions

  • Sick Lms100 Firmware

    OS
    Sick
    < 2.0

  • Sick Lms101

    HW
    Sick
    all versions

  • Sick Lms101 Firmware

    OS
    Sick
    < 2.0

  • Sick Lms111

    HW
    Sick
    all versions

  • Sick Lms111 Firmware

    OS
    Sick
    < 1.04< 2.0
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2023-4419CRITICAL9.8PL ✓same product

Zakodowane na stałe dane uwierzytelniające w SICK LMS5xx

CVE-2023-4420CRITICAL9.8PL ✓same product

Brak szyfrowania TLS w urządzeniach SICK LMS5xx — przechwycenie komunikacji

CVE-2022-27577CRITICAL9.1PL ✓same product

Przewidywalny numer sekwencyjny TCP w SICK MSC800 — fałszowanie pakietów

CVE-2019-10979CRITICAL9.8PL ✓same product

SICK MSC800: Zakodowane na stałe hasło konta klienta (hard-coded password)

CVE-2023-31412HIGH7.5same product

The LMS5xx uses weak hash generation methods, resulting in the creation of insecure hashs. If an attacker mana...