What is the CVSS score of CVE-2020-2075?

CVE-2020-2075 has a CVSS 3.1 base score of 7.5 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 1.4%.

Lms111 Firmware CVE-2020-2075

HIGH

Improper Check or Handling of Exceptional Conditions (CWE-703)

2020-08-31 psirt@sick.de

Information Disclosure Lms111 Firmware Lms511 Firmware Clv620 Firmware Clv622 Firmware Clv621 Firmware Icr890 3 Firmware Msc800 Firmware Rfh Firmware Clv650 Firmware Clv651 Firmware Clv631 Firmware Clv630 Firmware Clv632 Firmware Clv640 Firmware Clv642 Firmware Lms100 Firmware Lms101 Firmware Lms153 Firmware Lms151 Firmware Lms133 Firmware Lms142 Firmware Lms143 Firmware Lms131 Firmware Lms121 Firmware Lms123 Firmware Lms122 Firmware Lms141 Firmware Lms531 Firmware Lms500 Firmware Icr890 3 5 Firmware

7.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.5 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVE Published

Aug 31, 2020 - 18:15 nvd

HIGH 7.5

DescriptionNVD

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x - CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

AnalysisAI

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x - CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x,. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-703. Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x - CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH. Affected products include: Sick Lms111 Firmware, Sick Lms511 Firmware, Sick Clv620 Firmware, Sick Clv622 Firmware, Sick Clv621 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.