Improper handling of exceptional conditions in Bulkscan LMS111; Bulkscan LMS511; CLV62x…
Priority LOW 36CWE-703Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA.
Summary
Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.
Why it matters now
EPSS 0.0143 73rd percentileScored 2026-11-07
Fix Fixed Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH: V1.04, V2.30, V2.0 +2
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH | before V1.04; before V2.30; All versions with Ethernet interface; All ICR890-3 and ICR890-3.5 devices all versions; before V2.0; before V2.10; All versions; before V4.10 | V1.04, V2.30, V2.0, V2.10, V4.10 | Patch available | CNA |
- Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH Vendor— Affected before V1.04; before V2.30; All versions with Ethernet interface; All ICR890-3 and ICR890-3.5 devices all versions; before V2.0; before V2.10; All versions; before V4.10 Fixed in V1.04, V2.30, V2.0, V2.10, V4.10 Patch available CNA
CPE configurations NVD · 62
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:* | before 1.04 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* | before 2.30 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv620_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv620:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv622_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv622:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv621_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv621:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
- cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:* Versions before 1.04 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* Versions before 2.30 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv620_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv620:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv622_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv622:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv621_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv621:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
Show 52 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:sick:icr890-3_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:icr890-3:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:* | before 4.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:msc800:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:rfh_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:rfh:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv650_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv650:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv651_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv651:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv631_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv631:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv630_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv630:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv632_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv632:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv640_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv640:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:clv642_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:clv642:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms100_firmware:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms100:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms101_firmware:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms101:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | SICK AG |
| cpe:2.3:o:sick:lms153_firmware:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms153:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms151_firmware:*:*:*:*:*:*:*:* | before 2.0 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms151:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms133_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms133:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms142_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms142:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms143_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms143:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms131_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms131:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms121_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms121:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms123_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms123:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms122_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms122:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms141_firmware:*:*:*:*:*:*:*:* | before 2.10 | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms141:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
| cpe:2.3:o:sick:icr890-3.5_firmware:*:*:*:*:*:*:*:* | all versions | Vulnerable | SICK AG |
| cpe:2.3:h:sick:icr890-3.5:-:*:*:*:*:*:*:* | not specified by NVD | Running on | SICK AG |
- cpe:2.3:o:sick:icr890-3_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:icr890-3:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:* Versions before 4.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:msc800:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:rfh_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:rfh:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv650_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv650:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv651_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv651:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv631_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv631:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv630_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv630:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv632_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv632:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv640_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv640:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:clv642_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:clv642:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms100_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms100:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms101_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms101:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·SICK AG
- cpe:2.3:o:sick:lms153_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms153:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms151_firmware:*:*:*:*:*:*:*:* Versions before 2.0 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms151:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms133_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms133:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms142_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms142:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms143_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms143:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms131_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms131:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms121_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms121:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms123_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms123:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms122_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms122:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms141_firmware:*:*:*:*:*:*:*:* Versions before 2.10 Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms141:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
- cpe:2.3:o:sick:icr890-3.5_firmware:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·SICK AG
- cpe:2.3:h:sick:icr890-3.5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·SICK AG
Remediation
- Fix · CNA Bulkscan LMS111; Bulkscan LMS511; CLV62x – CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH Fixed in V1.04, V2.30, V2.0, V2.10, V4.10
Timeline
- 2026-10-02 Threatist record created from CVE-2020-2075
- 2026-10-03 Alias added: GHSA-2w82-h9hh-7q9j
References
Sources
- CVE-2020-2075 · CVE Program
- CVE-2020-2075 · NVD
- FIRST EPSS
- GHSA-2w82-h9hh-7q9j · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences