CVE-2020-2075: Sick CLV620 Firmware

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x – CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.

Affected products

• Sick CLV620 Firmware: any version
• Sick CLV621 Firmware: any version
• Sick CLV622 Firmware: any version
• Sick CLV630 Firmware: any version
• Sick CLV631 Firmware: any version
• Sick CLV632 Firmware: any version
• Sick CLV640 Firmware: any version
• Sick CLV642 Firmware: any version
• Sick CLV650 Firmware: any version
• Sick CLV651 Firmware: any version
• Sick ICR890-3.5 Firmware: any version
• Sick ICR890-3 Firmware: any version
• Sick LMS100 Firmware: before 2.0 (fixed in 2.0)
• Sick LMS101 Firmware: before 2.0 (fixed in 2.0)
• Sick LMS111 Firmware: before 1.04 (fixed in 1.04); before 2.0 (fixed in 2.0)
• Sick LMS121 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS122 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS123 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS131 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS133 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS141 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS142 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS143 Firmware: before 2.10 (fixed in 2.10)
• Sick LMS151 Firmware: before 2.0 (fixed in 2.0)
• Sick LMS153 Firmware: before 2.0 (fixed in 2.0)
• and 5 more

Published 2020-08-31. Last modified 2026-06-17.