CVE-2020-2075

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Published: 2020-08-31 Last update: 2026-06-16 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2020-2075 is rated Moderate Risk (55.6/100): CVSS High severity, with medium exploitation likelihood (EPSS 1.43%). EPSS rose +1.25% over the last day, indicating growing attacker interest. Review affected assets and schedule remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2020-2075

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-06-15 0.18% 1.43% +1.25%
2 2025-03-30 0.26% 0.18% -0.08%
3 2025-03-29 — 0.26% —

Full EPSS history (8 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2020-2075

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
7.5 3.1 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Click to expand
Attack vector (AV:N)
Could be attacked over the internet or any normal routed network—not just someone sitting at the machine.
Attack complexity (AC:L)
Once they can reach the bug, pulling it off is straightforward—no weird race conditions or rare setup.
Privileges required (PR:N)
No account or special rights needed—anonymous or random user is enough.
User interaction (UI:N)
Nobody has to click “OK” or open a trap file; it can work without a victim helping.
Scope (S:U)
Damage stays in the same “trust bubble” as the broken component—no big spill into unrelated systems.
Confidentiality (C:N)
Doesn’t really leak secrets in a meaningful way.
Integrity (I:N)
Data isn’t meaningfully altered or forged.
Availability (A:H)
Could take the service down hard or make it unusable for people who depend on it.
 3.9 3.6 [email protected]
5.0 2.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:L)
Exploitation conditions are straightforward and predictable.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:N)
No confidentiality impact.
Integrity impact (I:N)
No integrity impact.
Availability impact (A:P)
Partial availability impact.
 10.0 2.9 [email protected]

Weakness enumeration for CVE-2020-2075

Affected software / configurations for CVE-2020-2075

Vendor Product Version Raw CPE
sick lms111_firmware < 1.04 cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*
sick lms511_firmware < 2.30 cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*
sick clv620_firmware — cpe:2.3:o:sick:clv620_firmware:*:*:*:*:*:*:*:*
sick clv622_firmware — cpe:2.3:o:sick:clv622_firmware:*:*:*:*:*:*:*:*
sick clv621_firmware — cpe:2.3:o:sick:clv621_firmware:*:*:*:*:*:*:*:*
sick icr890-3_firmware — cpe:2.3:o:sick:icr890-3_firmware:*:*:*:*:*:*:*:*
sick msc800_firmware < 4.10 cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:*
sick rfh_firmware — cpe:2.3:o:sick:rfh_firmware:*:*:*:*:*:*:*:*
sick clv650_firmware — cpe:2.3:o:sick:clv650_firmware:*:*:*:*:*:*:*:*
sick clv651_firmware — cpe:2.3:o:sick:clv651_firmware:*:*:*:*:*:*:*:*
sick clv631_firmware — cpe:2.3:o:sick:clv631_firmware:*:*:*:*:*:*:*:*
sick clv630_firmware — cpe:2.3:o:sick:clv630_firmware:*:*:*:*:*:*:*:*
sick clv632_firmware — cpe:2.3:o:sick:clv632_firmware:*:*:*:*:*:*:*:*
sick clv640_firmware — cpe:2.3:o:sick:clv640_firmware:*:*:*:*:*:*:*:*
sick clv642_firmware — cpe:2.3:o:sick:clv642_firmware:*:*:*:*:*:*:*:*
sick lms100_firmware < 2.0 cpe:2.3:o:sick:lms100_firmware:*:*:*:*:*:*:*:*
sick lms101_firmware < 2.0 cpe:2.3:o:sick:lms101_firmware:*:*:*:*:*:*:*:*
sick lms111_firmware < 2.0 cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*
sick lms153_firmware < 2.0 cpe:2.3:o:sick:lms153_firmware:*:*:*:*:*:*:*:*
sick lms151_firmware < 2.0 cpe:2.3:o:sick:lms151_firmware:*:*:*:*:*:*:*:*
sick lms133_firmware < 2.10 cpe:2.3:o:sick:lms133_firmware:*:*:*:*:*:*:*:*
sick lms142_firmware < 2.10 cpe:2.3:o:sick:lms142_firmware:*:*:*:*:*:*:*:*
sick lms143_firmware < 2.10 cpe:2.3:o:sick:lms143_firmware:*:*:*:*:*:*:*:*
sick lms131_firmware < 2.10 cpe:2.3:o:sick:lms131_firmware:*:*:*:*:*:*:*:*
sick lms121_firmware < 2.10 cpe:2.3:o:sick:lms121_firmware:*:*:*:*:*:*:*:*
sick lms123_firmware < 2.10 cpe:2.3:o:sick:lms123_firmware:*:*:*:*:*:*:*:*
sick lms122_firmware < 2.10 cpe:2.3:o:sick:lms122_firmware:*:*:*:*:*:*:*:*
sick lms141_firmware < 2.10 cpe:2.3:o:sick:lms141_firmware:*:*:*:*:*:*:*:*
sick lms511_firmware — cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*
sick lms531_firmware — cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:*
sick lms500_firmware — cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:*
sick icr890-3.5_firmware — cpe:2.3:o:sick:icr890-3.5_firmware:*:*:*:*:*:*:*:*

References for CVE-2020-2075

cvelogic Threat Intelligence