Skip to content
OpenAdvisories
High SCA-2020-0004 1 CVE

Vulnerability in Platform Mechanism AutoIP

Published Aug 31, 2020 · Updated Aug 31, 2020 · Revision 3

Vendor: SICK Product: Bulkscan LMS111 Product: Bulkscan LMS111 Firmware Product: Bulkscan LMS511 Product: Bulkscan LMS511 Firmware Product: CLV62x Product: CLV62x Firmware Product: CLV63x Product: CLV63x Firmware Product: CLV64x Product: CLV64x Firmware Product: CLV65x Product: CLV65x Firmware Product: ICR890-3 Product: ICR890-3 Firmware Product: LMS10x Product: LMS10x Firmware Product: LMS11x Product: LMS11x Firmware Product: LMS12x Product: LMS12x Firmware Product: LMS13x Product: LMS13x Firmware Product: LMS14x Product: LMS14x Firmware Product: LMS15x Product: LMS15x Firmware Product: LMS53x Product: LMS53x Firmware Product: LMS5xx +5 more

Summary

SICK received a report from IOActive that informed SICK about a security vulnerability within the platform mechanism AutoIP, used by multiple devices.

SICK recommends updating to the newest version. Refer to the recommended remediations for affected products where no update is available.

Currently SICK is not aware of any public exploits specifically targeting this vulnerability.

Vulnerabilities 1

  • Unscored —
    CVE-2020-2075

    Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulksc…

Revision history

  1. #3

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #2

    Updated Advisory (only visual changes)

  3. #1

    Initial Release

References