{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Ruben Santamarta"
        ],
        "organization": "IOActive",
        "summary": "his research and the report."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "audience": "all",
        "category": "summary",
        "text": "SICK received a report from IOActive that informed SICK about a security vulnerability within the platform mechanism AutoIP, used by multiple devices. \n\nSICK recommends updating to the newest version. Refer to the recommended remediations for affected products where no update is available. \n\nCurrently SICK is not aware of any public exploits specifically targeting this vulnerability.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.",
        "title": "General Security Measures"
      },
      {
        "category": "general",
        "text": "SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer\u2019s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.",
        "title": "Vulnerability Classification"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@sick.de",
      "issuing_authority": "SICK AG issues and issues in EHS products (when related to the Endress+Hauser SICK (EHS) joint venture).",
      "name": "SICK PSIRT",
      "namespace": "https://www.sick.com/psirt"
    },
    "references": [
      {
        "summary": "SICK PSIRT Security Advisories",
        "url": "https://sick.com/psirt"
      },
      {
        "summary": "SICK Operating Guidelines",
        "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"
      },
      {
        "summary": "ICS-CERT recommended practices on Industrial Security",
        "url": "http://ics-cert.us-cert.gov/content/recommended-practices"
      },
      {
        "summary": "CVSS v3.1 Calculator",
        "url": "https://www.first.org/cvss/calculator/3.1"
      },
      {
        "category": "self",
        "summary": "The canonical URL.",
        "url": "https://www.sick.com/.well-known/csaf/white/2020/sca-2020-0004.json"
      }
    ],
    "title": "Vulnerability in Platform Mechanism AutoIP",
    "tracking": {
      "current_release_date": "2020-08-31T10:00:00.000Z",
      "generator": {
        "date": "2023-02-10T13:05:04.376Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.0.0"
        }
      },
      "id": "SCA-2020-0004",
      "initial_release_date": "2020-08-31T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2020-10-29T11:00:00.000Z",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2023-02-10T11:00:00.000Z",
          "number": "2",
          "summary": "Updated Advisory (only visual changes)"
        },
        {
          "date": "2025-07-30T07:27:40.000Z",
          "number": "3",
          "summary": "Updated Advisory: URL for SICK Operating Guidelines has been updated"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV62x all versions",
                      "product_id": "CSAFPID-0001",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv62x/c/g79824"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV62x"
              }
            ],
            "category": "product_family",
            "name": "CLV62x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV63x all versions",
                      "product_id": "CSAFPID-0002",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv63x/c/g79846"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV63x"
              }
            ],
            "category": "product_family",
            "name": "CLV63x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV64x all versions",
                      "product_id": "CSAFPID-0003",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv64x/c/g79874"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV64x"
              }
            ],
            "category": "product_family",
            "name": "CLV64x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV65x all versions",
                      "product_id": "CSAFPID-0004",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv65x/c/g79879"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV65x"
              }
            ],
            "category": "product_family",
            "name": "CLV65x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS10x all versions",
                      "product_id": "CSAFPID-0005"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS10x"
              }
            ],
            "category": "product_family",
            "name": "LMS10x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS11x all versions",
                      "product_id": "CSAFPID-0006"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS11x"
              }
            ],
            "category": "product_family",
            "name": "LMS11x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS15x all versions",
                      "product_id": "CSAFPID-0007"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS15x"
              }
            ],
            "category": "product_family",
            "name": "LMS15x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS12x all versions",
                      "product_id": "CSAFPID-0008"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS12x"
              }
            ],
            "category": "product_family",
            "name": "LMS12x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS13x all versions",
                      "product_id": "CSAFPID-0009"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS13x"
              }
            ],
            "category": "product_family",
            "name": "LMS13x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS14x all versions",
                      "product_id": "CSAFPID-0010"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS14x"
              }
            ],
            "category": "product_family",
            "name": "LMS14x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS5xx all versions",
                      "product_id": "CSAFPID-0011",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/lidar-sensoren/2d-lidar-sensoren/lms5xx/c/g179651"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS5xx"
              }
            ],
            "category": "product_family",
            "name": "LMS5xx"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS53x all versions",
                      "product_id": "CSAFPID-0012"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS53x"
              }
            ],
            "category": "product_family",
            "name": "LMS53x"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK MSC800 all versions",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "MSC800"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK RFH all versions",
                  "product_id": "CSAFPID-0014"
                }
              }
            ],
            "category": "product_name",
            "name": "RFH"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "ICR890-3\u0026ICR890-3.5",
                "product": {
                  "name": "SICK ICR890-3 ICR890-3\u0026ICR890-3.5",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "ICR890-3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK Bulkscan LMS111 all versions",
                  "product_id": "CSAFPID-0016"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS111"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK Bulkscan LMS511 all versions",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS511"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV62x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0018"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV62x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV63x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV63x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV64x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0020"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV64x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV65x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV65x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS10x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0022"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS10x Firmware 2.0",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS10x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS11x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0024"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS11x Firmware 2.0",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS11x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS15x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0026"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS15x Firmware 2.0",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS15x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS12x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0028"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS12x Firmware 2.1",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS12x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS13x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0030"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS13x Firmware 2.1",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS13x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS14x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0032"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS14x Firmware 2.1",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS14x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK LMS5xx Firmware all versions",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS5xx Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK LMS53x Firmware all versions",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS53x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c4.1",
                "product": {
                  "name": "SICK MSC800 Firmware \u003c4.1",
                  "product_id": "CSAFPID-0036"
                }
              },
              {
                "category": "product_version",
                "name": "4.1",
                "product": {
                  "name": "SICK MSC800 Firmware 4.1",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "MSC800 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK RFH Firmware all versions",
                  "product_id": "CSAFPID-0038"
                }
              }
            ],
            "category": "product_name",
            "name": "RFH Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK ICR890-3 Firmware all versions",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "ICR890-3 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.04",
                "product": {
                  "name": "SICK Bulkscan LMS111 Firmware \u003c1.04",
                  "product_id": "CSAFPID-0040"
                }
              },
              {
                "category": "product_version",
                "name": "1.04",
                "product": {
                  "name": "SICK Bulkscan LMS111 Firmware 1.04",
                  "product_id": "CSAFPID-0041"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS111 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.3",
                "product": {
                  "name": "SICK Bulkscan LMS511 Firmware \u003c2.3",
                  "product_id": "CSAFPID-0042"
                }
              },
              {
                "category": "product_version",
                "name": "2.3",
                "product": {
                  "name": "SICK Bulkscan LMS511 Firmware 2.3",
                  "product_id": "CSAFPID-0043"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS511 Firmware"
          }
        ],
        "category": "vendor",
        "name": "SICK AG"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV62x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0044"
        },
        "product_reference": "CSAFPID-0018",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV63x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0045"
        },
        "product_reference": "CSAFPID-0019",
        "relates_to_product_reference": "CSAFPID-0002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV64x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0046"
        },
        "product_reference": "CSAFPID-0020",
        "relates_to_product_reference": "CSAFPID-0003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV65x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0047"
        },
        "product_reference": "CSAFPID-0021",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS10x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0048"
        },
        "product_reference": "CSAFPID-0022",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS11x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0049"
        },
        "product_reference": "CSAFPID-0024",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS15x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0050"
        },
        "product_reference": "CSAFPID-0026",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS12x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0051"
        },
        "product_reference": "CSAFPID-0028",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS13x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0052"
        },
        "product_reference": "CSAFPID-0030",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS14x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0053"
        },
        "product_reference": "CSAFPID-0032",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS5xx all Firmware versions",
          "product_id": "CSAFPID-0054"
        },
        "product_reference": "CSAFPID-0034",
        "relates_to_product_reference": "CSAFPID-0011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS53x all Firmware versions",
          "product_id": "CSAFPID-0055"
        },
        "product_reference": "CSAFPID-0035",
        "relates_to_product_reference": "CSAFPID-0012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MSC800 with Firmware \u003c4.1",
          "product_id": "CSAFPID-0056"
        },
        "product_reference": "CSAFPID-0036",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK RFH all Firmware versions",
          "product_id": "CSAFPID-0057"
        },
        "product_reference": "CSAFPID-0038",
        "relates_to_product_reference": "CSAFPID-0014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK ICR890-3 all Firmware versions",
          "product_id": "CSAFPID-0058"
        },
        "product_reference": "CSAFPID-0039",
        "relates_to_product_reference": "CSAFPID-0015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS111 with Firmware \u003c1.04",
          "product_id": "CSAFPID-0059"
        },
        "product_reference": "CSAFPID-0040",
        "relates_to_product_reference": "CSAFPID-0016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS511 with Firmware \u003c2.3",
          "product_id": "CSAFPID-0060"
        },
        "product_reference": "CSAFPID-0042",
        "relates_to_product_reference": "CSAFPID-0017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS10x with Firmware 2.0",
          "product_id": "CSAFPID-0061"
        },
        "product_reference": "CSAFPID-0023",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS11x with Firmware 2.0",
          "product_id": "CSAFPID-0062"
        },
        "product_reference": "CSAFPID-0025",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS15x with Firmware 2.0",
          "product_id": "CSAFPID-0063"
        },
        "product_reference": "CSAFPID-0027",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS12x with Firmware 2.1",
          "product_id": "CSAFPID-0064"
        },
        "product_reference": "CSAFPID-0029",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS13x with Firmware 2.1",
          "product_id": "CSAFPID-0065"
        },
        "product_reference": "CSAFPID-0031",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS14x with Firmware 2.1",
          "product_id": "CSAFPID-0066"
        },
        "product_reference": "CSAFPID-0033",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MSC800 with Firmware 4.1",
          "product_id": "CSAFPID-0067"
        },
        "product_reference": "CSAFPID-0037",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS111 with Firmware 1.04",
          "product_id": "CSAFPID-0068"
        },
        "product_reference": "CSAFPID-0041",
        "relates_to_product_reference": "CSAFPID-0016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS511 with Firmware 2.3",
          "product_id": "CSAFPID-0069"
        },
        "product_reference": "CSAFPID-0043",
        "relates_to_product_reference": "CSAFPID-0017"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-2075",
      "notes": [
        {
          "category": "description",
          "text": "Improper handling of exceptional conditions in the platform mechanism AutoIP can lead to a reboot of the device, if parsing malformed network packets. This can lead to a temporary impact of the availability of the device. The AutoIP mechanism is used by the SOPAS Engineering Tool (SOPAS-ET), e.g. to detect SICK devices in the network and change their IP configuration. This is intended to simplify the initial setup and the maintenance of the devices. The devices listen on port 30718 for UDP broadcasts.\n\nSICK has released a new firmware version for the MSC800, Bulkscan LMS111, Bulkscan LMS511 and other LMS1xx devices."
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0061",
          "CSAFPID-0062",
          "CSAFPID-0063",
          "CSAFPID-0064",
          "CSAFPID-0065",
          "CSAFPID-0066",
          "CSAFPID-0067",
          "CSAFPID-0068",
          "CSAFPID-0069"
        ],
        "known_affected": [
          "CSAFPID-0044",
          "CSAFPID-0045",
          "CSAFPID-0046",
          "CSAFPID-0047",
          "CSAFPID-0048",
          "CSAFPID-0049",
          "CSAFPID-0050",
          "CSAFPID-0051",
          "CSAFPID-0052",
          "CSAFPID-0053",
          "CSAFPID-0054",
          "CSAFPID-0055",
          "CSAFPID-0056",
          "CSAFPID-0057",
          "CSAFPID-0058",
          "CSAFPID-0059",
          "CSAFPID-0060"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to version V1.04\n\nSICK removed the AutoIP weakness with the same available fix for the MSC800. The update can only be implemented by a SICK service technician, either by remote access or on site. To obtain the update, please contact your local service technician.",
          "product_ids": [
            "CSAFPID-0059"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.30\n\nSICK removed the AutoIP weakness with the same available fix for the MSC800. The update can only be implemented by a SICK service technician, either by remote access or on site. To obtain the update, please contact your local service technician.",
          "product_ids": [
            "CSAFPID-0060"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.0\n\nThe update fixes, that the LMS1xx series does not reboot anymore, after it received an incorrect payload on the AutoIP port. There are no known limitations. The update to version V2.0 respectively V2.10 will be available from mid-October 2020 on. To get the latest LMS1xx firmware update, please contact the responsible SICK Sales and Service unit, or download it from sick.com.",
          "product_ids": [
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.10\n\nThe update fixes, that the LMS1xx series does not reboot anymore, after it received an incorrect payload on the AutoIP port. There are no known limitations. The update to version V2.0 respectively V2.10 will be available from mid-October 2020 on. To get the latest LMS1xx firmware update, please contact the responsible SICK Sales and Service unit, or download it from sick.com.",
          "product_ids": [
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V4.1\n\nThe update fixes that the MSC800 does not reboot anymore after it received an incorrect payload on the AutoIP port. There are no known limitations. To get the latest MSC800 firmware update please contact the responsible SICK Sales and Service unit. They can support if there is the need to consider any customer specific changes or constraints related to legal for trade systems.",
          "product_ids": [
            "CSAFPID-0056"
          ]
        },
        {
          "category": "workaround",
          "details": "Restrict or block access to UDP port 30718 for the affected products. This workaround  reduces the risk of the exploitation of the vulnerability but also limits the AutoIP function.",
          "product_ids": [
            "CSAFPID-0057",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0058",
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047",
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050",
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0056",
            "CSAFPID-0057",
            "CSAFPID-0058",
            "CSAFPID-0059",
            "CSAFPID-0060"
          ]
        }
      ]
    }
  ]
}

{
  "document": {
    "acknowledgments": [
      {
        "names": [
          "Ruben Santamarta"
        ],
        "organization": "IOActive",
        "summary": "his research and the report."
      }
    ],
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "audience": "all",
        "category": "summary",
        "text": "SICK received a report from IOActive that informed SICK about a security vulnerability within the platform mechanism AutoIP, used by multiple devices. \n\nSICK recommends updating to the newest version. Refer to the recommended remediations for affected products where no update is available. \n\nCurrently SICK is not aware of any public exploits specifically targeting this vulnerability.",
        "title": "Summary"
      },
      {
        "category": "general",
        "text": "As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.",
        "title": "General Security Measures"
      },
      {
        "category": "general",
        "text": "SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer\u2019s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.",
        "title": "Vulnerability Classification"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@sick.de",
      "issuing_authority": "SICK AG issues and issues in EHS products (when related to the Endress+Hauser SICK (EHS) joint venture).",
      "name": "SICK PSIRT",
      "namespace": "https://www.sick.com/psirt"
    },
    "references": [
      {
        "summary": "SICK PSIRT Security Advisories",
        "url": "https://sick.com/psirt"
      },
      {
        "summary": "SICK Operating Guidelines",
        "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"
      },
      {
        "summary": "ICS-CERT recommended practices on Industrial Security",
        "url": "http://ics-cert.us-cert.gov/content/recommended-practices"
      },
      {
        "summary": "CVSS v3.1 Calculator",
        "url": "https://www.first.org/cvss/calculator/3.1"
      },
      {
        "category": "self",
        "summary": "The canonical URL.",
        "url": "https://www.sick.com/.well-known/csaf/white/2020/sca-2020-0004.json"
      }
    ],
    "title": "Vulnerability in Platform Mechanism AutoIP",
    "tracking": {
      "current_release_date": "2020-08-31T10:00:00.000Z",
      "generator": {
        "date": "2023-02-10T13:05:04.376Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.0.0"
        }
      },
      "id": "SCA-2020-0004",
      "initial_release_date": "2020-08-31T10:00:00.000Z",
      "revision_history": [
        {
          "date": "2020-10-29T11:00:00.000Z",
          "number": "1",
          "summary": "Initial Release"
        },
        {
          "date": "2023-02-10T11:00:00.000Z",
          "number": "2",
          "summary": "Updated Advisory (only visual changes)"
        },
        {
          "date": "2025-07-30T07:27:40.000Z",
          "number": "3",
          "summary": "Updated Advisory: URL for SICK Operating Guidelines has been updated"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV62x all versions",
                      "product_id": "CSAFPID-0001",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv62x/c/g79824"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV62x"
              }
            ],
            "category": "product_family",
            "name": "CLV62x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV63x all versions",
                      "product_id": "CSAFPID-0002",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv63x/c/g79846"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV63x"
              }
            ],
            "category": "product_family",
            "name": "CLV63x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV64x all versions",
                      "product_id": "CSAFPID-0003",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv64x/c/g79874"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV64x"
              }
            ],
            "category": "product_family",
            "name": "CLV64x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK CLV65x all versions",
                      "product_id": "CSAFPID-0004",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/identifikationsloesungen/stationaere-barcode-scanner/clv65x/c/g79879"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "CLV65x"
              }
            ],
            "category": "product_family",
            "name": "CLV65x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS10x all versions",
                      "product_id": "CSAFPID-0005"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS10x"
              }
            ],
            "category": "product_family",
            "name": "LMS10x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS11x all versions",
                      "product_id": "CSAFPID-0006"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS11x"
              }
            ],
            "category": "product_family",
            "name": "LMS11x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS15x all versions",
                      "product_id": "CSAFPID-0007"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS15x"
              }
            ],
            "category": "product_family",
            "name": "LMS15x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS12x all versions",
                      "product_id": "CSAFPID-0008"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS12x"
              }
            ],
            "category": "product_family",
            "name": "LMS12x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS13x all versions",
                      "product_id": "CSAFPID-0009"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS13x"
              }
            ],
            "category": "product_family",
            "name": "LMS13x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS14x all versions",
                      "product_id": "CSAFPID-0010"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS14x"
              }
            ],
            "category": "product_family",
            "name": "LMS14x"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS5xx all versions",
                      "product_id": "CSAFPID-0011",
                      "product_identification_helper": {
                        "x_generic_uris": [
                          {
                            "namespace": "SICK:Website",
                            "uri": "SICK:Website:https://www.sick.com/de/de/lidar-sensoren/2d-lidar-sensoren/lms5xx/c/g179651"
                          }
                        ]
                      }
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS5xx"
              }
            ],
            "category": "product_family",
            "name": "LMS5xx"
          },
          {
            "branches": [
              {
                "branches": [
                  {
                    "category": "product_version_range",
                    "name": "vers:all/*",
                    "product": {
                      "name": "SICK LMS53x all versions",
                      "product_id": "CSAFPID-0012"
                    }
                  }
                ],
                "category": "product_name",
                "name": "LMS53x"
              }
            ],
            "category": "product_family",
            "name": "LMS53x"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK MSC800 all versions",
                  "product_id": "CSAFPID-0013"
                }
              }
            ],
            "category": "product_name",
            "name": "MSC800"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK RFH all versions",
                  "product_id": "CSAFPID-0014"
                }
              }
            ],
            "category": "product_name",
            "name": "RFH"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "ICR890-3\u0026ICR890-3.5",
                "product": {
                  "name": "SICK ICR890-3 ICR890-3\u0026ICR890-3.5",
                  "product_id": "CSAFPID-0015"
                }
              }
            ],
            "category": "product_name",
            "name": "ICR890-3"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK Bulkscan LMS111 all versions",
                  "product_id": "CSAFPID-0016"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS111"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK Bulkscan LMS511 all versions",
                  "product_id": "CSAFPID-0017"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS511"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV62x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0018"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV62x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV63x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0019"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV63x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV64x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0020"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV64x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c=6.10",
                "product": {
                  "name": "SICK CLV65x Firmware \u003c=6.10",
                  "product_id": "CSAFPID-0021"
                }
              }
            ],
            "category": "product_name",
            "name": "CLV65x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS10x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0022"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS10x Firmware 2.0",
                  "product_id": "CSAFPID-0023"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS10x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS11x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0024"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS11x Firmware 2.0",
                  "product_id": "CSAFPID-0025"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS11x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.0",
                "product": {
                  "name": "SICK LMS15x Firmware \u003c2.0",
                  "product_id": "CSAFPID-0026"
                }
              },
              {
                "category": "product_version",
                "name": "2.0",
                "product": {
                  "name": "SICK LMS15x Firmware 2.0",
                  "product_id": "CSAFPID-0027"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS15x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS12x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0028"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS12x Firmware 2.1",
                  "product_id": "CSAFPID-0029"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS12x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS13x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0030"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS13x Firmware 2.1",
                  "product_id": "CSAFPID-0031"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS13x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.1",
                "product": {
                  "name": "SICK LMS14x Firmware \u003c2.1",
                  "product_id": "CSAFPID-0032"
                }
              },
              {
                "category": "product_version",
                "name": "2.1",
                "product": {
                  "name": "SICK LMS14x Firmware 2.1",
                  "product_id": "CSAFPID-0033"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS14x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK LMS5xx Firmware all versions",
                  "product_id": "CSAFPID-0034"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS5xx Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK LMS53x Firmware all versions",
                  "product_id": "CSAFPID-0035"
                }
              }
            ],
            "category": "product_name",
            "name": "LMS53x Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c4.1",
                "product": {
                  "name": "SICK MSC800 Firmware \u003c4.1",
                  "product_id": "CSAFPID-0036"
                }
              },
              {
                "category": "product_version",
                "name": "4.1",
                "product": {
                  "name": "SICK MSC800 Firmware 4.1",
                  "product_id": "CSAFPID-0037"
                }
              }
            ],
            "category": "product_name",
            "name": "MSC800 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK RFH Firmware all versions",
                  "product_id": "CSAFPID-0038"
                }
              }
            ],
            "category": "product_name",
            "name": "RFH Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK ICR890-3 Firmware all versions",
                  "product_id": "CSAFPID-0039"
                }
              }
            ],
            "category": "product_name",
            "name": "ICR890-3 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c1.04",
                "product": {
                  "name": "SICK Bulkscan LMS111 Firmware \u003c1.04",
                  "product_id": "CSAFPID-0040"
                }
              },
              {
                "category": "product_version",
                "name": "1.04",
                "product": {
                  "name": "SICK Bulkscan LMS111 Firmware 1.04",
                  "product_id": "CSAFPID-0041"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS111 Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2.3",
                "product": {
                  "name": "SICK Bulkscan LMS511 Firmware \u003c2.3",
                  "product_id": "CSAFPID-0042"
                }
              },
              {
                "category": "product_version",
                "name": "2.3",
                "product": {
                  "name": "SICK Bulkscan LMS511 Firmware 2.3",
                  "product_id": "CSAFPID-0043"
                }
              }
            ],
            "category": "product_name",
            "name": "Bulkscan LMS511 Firmware"
          }
        ],
        "category": "vendor",
        "name": "SICK AG"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV62x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0044"
        },
        "product_reference": "CSAFPID-0018",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV63x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0045"
        },
        "product_reference": "CSAFPID-0019",
        "relates_to_product_reference": "CSAFPID-0002"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV64x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0046"
        },
        "product_reference": "CSAFPID-0020",
        "relates_to_product_reference": "CSAFPID-0003"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK CLV65x with Firmware \u003c=6.10",
          "product_id": "CSAFPID-0047"
        },
        "product_reference": "CSAFPID-0021",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS10x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0048"
        },
        "product_reference": "CSAFPID-0022",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS11x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0049"
        },
        "product_reference": "CSAFPID-0024",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS15x with Firmware \u003c2.0",
          "product_id": "CSAFPID-0050"
        },
        "product_reference": "CSAFPID-0026",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS12x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0051"
        },
        "product_reference": "CSAFPID-0028",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS13x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0052"
        },
        "product_reference": "CSAFPID-0030",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS14x with Firmware \u003c2.1",
          "product_id": "CSAFPID-0053"
        },
        "product_reference": "CSAFPID-0032",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS5xx all Firmware versions",
          "product_id": "CSAFPID-0054"
        },
        "product_reference": "CSAFPID-0034",
        "relates_to_product_reference": "CSAFPID-0011"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS53x all Firmware versions",
          "product_id": "CSAFPID-0055"
        },
        "product_reference": "CSAFPID-0035",
        "relates_to_product_reference": "CSAFPID-0012"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MSC800 with Firmware \u003c4.1",
          "product_id": "CSAFPID-0056"
        },
        "product_reference": "CSAFPID-0036",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK RFH all Firmware versions",
          "product_id": "CSAFPID-0057"
        },
        "product_reference": "CSAFPID-0038",
        "relates_to_product_reference": "CSAFPID-0014"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK ICR890-3 all Firmware versions",
          "product_id": "CSAFPID-0058"
        },
        "product_reference": "CSAFPID-0039",
        "relates_to_product_reference": "CSAFPID-0015"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS111 with Firmware \u003c1.04",
          "product_id": "CSAFPID-0059"
        },
        "product_reference": "CSAFPID-0040",
        "relates_to_product_reference": "CSAFPID-0016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS511 with Firmware \u003c2.3",
          "product_id": "CSAFPID-0060"
        },
        "product_reference": "CSAFPID-0042",
        "relates_to_product_reference": "CSAFPID-0017"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS10x with Firmware 2.0",
          "product_id": "CSAFPID-0061"
        },
        "product_reference": "CSAFPID-0023",
        "relates_to_product_reference": "CSAFPID-0005"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS11x with Firmware 2.0",
          "product_id": "CSAFPID-0062"
        },
        "product_reference": "CSAFPID-0025",
        "relates_to_product_reference": "CSAFPID-0006"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS15x with Firmware 2.0",
          "product_id": "CSAFPID-0063"
        },
        "product_reference": "CSAFPID-0027",
        "relates_to_product_reference": "CSAFPID-0007"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS12x with Firmware 2.1",
          "product_id": "CSAFPID-0064"
        },
        "product_reference": "CSAFPID-0029",
        "relates_to_product_reference": "CSAFPID-0008"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS13x with Firmware 2.1",
          "product_id": "CSAFPID-0065"
        },
        "product_reference": "CSAFPID-0031",
        "relates_to_product_reference": "CSAFPID-0009"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK LMS14x with Firmware 2.1",
          "product_id": "CSAFPID-0066"
        },
        "product_reference": "CSAFPID-0033",
        "relates_to_product_reference": "CSAFPID-0010"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK MSC800 with Firmware 4.1",
          "product_id": "CSAFPID-0067"
        },
        "product_reference": "CSAFPID-0037",
        "relates_to_product_reference": "CSAFPID-0013"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS111 with Firmware 1.04",
          "product_id": "CSAFPID-0068"
        },
        "product_reference": "CSAFPID-0041",
        "relates_to_product_reference": "CSAFPID-0016"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Bulkscan LMS511 with Firmware 2.3",
          "product_id": "CSAFPID-0069"
        },
        "product_reference": "CSAFPID-0043",
        "relates_to_product_reference": "CSAFPID-0017"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2020-2075",
      "notes": [
        {
          "category": "description",
          "text": "Improper handling of exceptional conditions in the platform mechanism AutoIP can lead to a reboot of the device, if parsing malformed network packets. This can lead to a temporary impact of the availability of the device. The AutoIP mechanism is used by the SOPAS Engineering Tool (SOPAS-ET), e.g. to detect SICK devices in the network and change their IP configuration. This is intended to simplify the initial setup and the maintenance of the devices. The devices listen on port 30718 for UDP broadcasts.\n\nSICK has released a new firmware version for the MSC800, Bulkscan LMS111, Bulkscan LMS511 and other LMS1xx devices."
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0061",
          "CSAFPID-0062",
          "CSAFPID-0063",
          "CSAFPID-0064",
          "CSAFPID-0065",
          "CSAFPID-0066",
          "CSAFPID-0067",
          "CSAFPID-0068",
          "CSAFPID-0069"
        ],
        "known_affected": [
          "CSAFPID-0044",
          "CSAFPID-0045",
          "CSAFPID-0046",
          "CSAFPID-0047",
          "CSAFPID-0048",
          "CSAFPID-0049",
          "CSAFPID-0050",
          "CSAFPID-0051",
          "CSAFPID-0052",
          "CSAFPID-0053",
          "CSAFPID-0054",
          "CSAFPID-0055",
          "CSAFPID-0056",
          "CSAFPID-0057",
          "CSAFPID-0058",
          "CSAFPID-0059",
          "CSAFPID-0060"
        ]
      },
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "Update to version V1.04\n\nSICK removed the AutoIP weakness with the same available fix for the MSC800. The update can only be implemented by a SICK service technician, either by remote access or on site. To obtain the update, please contact your local service technician.",
          "product_ids": [
            "CSAFPID-0059"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.30\n\nSICK removed the AutoIP weakness with the same available fix for the MSC800. The update can only be implemented by a SICK service technician, either by remote access or on site. To obtain the update, please contact your local service technician.",
          "product_ids": [
            "CSAFPID-0060"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.0\n\nThe update fixes, that the LMS1xx series does not reboot anymore, after it received an incorrect payload on the AutoIP port. There are no known limitations. The update to version V2.0 respectively V2.10 will be available from mid-October 2020 on. To get the latest LMS1xx firmware update, please contact the responsible SICK Sales and Service unit, or download it from sick.com.",
          "product_ids": [
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V2.10\n\nThe update fixes, that the LMS1xx series does not reboot anymore, after it received an incorrect payload on the AutoIP port. There are no known limitations. The update to version V2.0 respectively V2.10 will be available from mid-October 2020 on. To get the latest LMS1xx firmware update, please contact the responsible SICK Sales and Service unit, or download it from sick.com.",
          "product_ids": [
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Update to version V4.1\n\nThe update fixes that the MSC800 does not reboot anymore after it received an incorrect payload on the AutoIP port. There are no known limitations. To get the latest MSC800 firmware update please contact the responsible SICK Sales and Service unit. They can support if there is the need to consider any customer specific changes or constraints related to legal for trade systems.",
          "product_ids": [
            "CSAFPID-0056"
          ]
        },
        {
          "category": "workaround",
          "details": "Restrict or block access to UDP port 30718 for the affected products. This workaround  reduces the risk of the exploitation of the vulnerability but also limits the AutoIP function.",
          "product_ids": [
            "CSAFPID-0057",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0058",
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0044",
            "CSAFPID-0045",
            "CSAFPID-0046",
            "CSAFPID-0047",
            "CSAFPID-0048",
            "CSAFPID-0049",
            "CSAFPID-0050",
            "CSAFPID-0051",
            "CSAFPID-0052",
            "CSAFPID-0053",
            "CSAFPID-0054",
            "CSAFPID-0055",
            "CSAFPID-0056",
            "CSAFPID-0057",
            "CSAFPID-0058",
            "CSAFPID-0059",
            "CSAFPID-0060"
          ]
        }
      ]
    }
  ]
}

{
  "GSD": {
    "alias": "CVE-2020-2075",
    "description": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.",
    "id": "GSD-2020-2075"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2020-2075"
      ],
      "details": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.",
      "id": "GSD-2020-2075",
      "modified": "2023-12-13T01:21:50.858321Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "psirt@sick.de",
        "ID": "CVE-2020-2075",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Bulkscan LMS111; Bulkscan LMS511; CLV62x \u2013 CLV65x; ICR890-3; LMS10x, LMS11x, LMS15x; LMS12x, LMS13x, LMS14x; LMS5xx, LMS53x; MSC800; RFH",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All Versions \u003c V1.04"
                        },
                        {
                          "version_value": "All Versions \u003c V2.30"
                        },
                        {
                          "version_value": "All versions with Ethernet interface"
                        },
                        {
                          "version_value": "All ICR890-3 and ICR890-3.5 devices all versions"
                        },
                        {
                          "version_value": "All Versions \u003c V2.0"
                        },
                        {
                          "version_value": "All Versions \u003c V2.10"
                        },
                        {
                          "version_value": "All versions"
                        },
                        {
                          "version_value": "All Versions \u003c V4.10"
                        },
                        {
                          "version_value": "All versions"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-703: Improper Check or Handling of Exceptional Conditions"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories",
            "refsource": "MISC",
            "url": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "1.04",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.30",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv620_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv620:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv622_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv622:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv621_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv621:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:icr890-3_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:icr890-3:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "4.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:msc800:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:rfh_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:rfh:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv650_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv650:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv651_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv651:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv631_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv631:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv630_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv630:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv632_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv632:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv640_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv640:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:clv642_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:clv642:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms100_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms100:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms101_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms101:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms153_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms153:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms151_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.0",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms151:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms133_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms133:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms142_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms142:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms143_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms143:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms131_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms131:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms121_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms121:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms123_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms123:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms122_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms122:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms141_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "versionEndExcluding": "2.10",
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms141:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          },
          {
            "children": [
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:o:sick:icr890-3.5_firmware:*:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": true
                  }
                ],
                "operator": "OR"
              },
              {
                "children": [],
                "cpe_match": [
                  {
                    "cpe23Uri": "cpe:2.3:h:sick:icr890-3.5:-:*:*:*:*:*:*:*",
                    "cpe_name": [],
                    "vulnerable": false
                  }
                ],
                "operator": "OR"
              }
            ],
            "cpe_match": [],
            "operator": "AND"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@sick.de",
          "ID": "CVE-2020-2075"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-755"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories",
              "refsource": "MISC",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "acInsufInfo": false,
          "cvssV2": {
            "accessComplexity": "LOW",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 5.0,
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 10.0,
          "impactScore": 2.9,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        },
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.5,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "NONE",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 3.6
        }
      },
      "lastModifiedDate": "2020-09-04T17:36Z",
      "publishedDate": "2020-08-31T18:15Z"
    }
  }
}

{
  "affected": [],
  "aliases": [
    "CVE-2020-2075"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2020-08-31T18:15:00Z",
    "severity": "MODERATE"
  },
  "details": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH.",
  "id": "GHSA-2w82-h9hh-7q9j",
  "modified": "2022-05-24T22:28:05Z",
  "published": "2022-05-24T22:28:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2020-2075"
    },
    {
      "type": "WEB",
      "url": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E4E9439B-2153-4D66-8C8B-D7DED32BD81B",
              "versionEndExcluding": "1.04",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "67011E35-C9AB-40C5-8DCC-29FA82A5F880",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "33CCFE2A-61B1-4565-8504-F26A0412A0CD",
              "versionEndExcluding": "2.30",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ABE387A-9B29-43DE-A4F1-EDD3CB8BEB6F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv620_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "97320450-2AEC-4E4A-9399-E2115AC4315A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv620:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6A58D587-1663-4E99-85DA-80DCBF0486F1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv622_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BC9D5448-F17A-4042-A8F8-EE261F3C3E9E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv622:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8559D0CC-2CBE-4E4B-9FF9-43AECFFD27C5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv621_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D07761A7-0CFE-4F43-9ADC-FCC28FA5ECFE",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv621:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5189BEF6-17B2-4F77-B8E3-85B00D977CBA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:icr890-3_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0D9C80C4-52DA-40E2-8C38-8014F616D1AB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:icr890-3:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3A05BC1-4E78-494B-B6E2-5F1E721CC50B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:msc800_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6E01267B-42D2-4F29-BFEF-6AD37D48582A",
              "versionEndExcluding": "4.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:msc800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5A09CB55-1368-4623-8EB5-BAB2D57E4BC4",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:rfh_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7074A993-231B-45B9-ACC8-14594D420F16",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:rfh:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "983F3C0E-7C67-47EA-BD54-8F3B7BF5493A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv650_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C5A30918-7CA4-4C05-896B-20426A30D86F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv650:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3FB3E2F-1637-4861-AF22-D4BF59A7906D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv651_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "C7BBD455-DA1C-4E86-BC99-143B22D4448F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv651:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2313BBE6-6679-4073-9FC0-51FBE9F0A8B3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv631_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCA9ED42-6E5A-4456-B099-D08EB6ABB0DD",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv631:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0893F42F-EAB9-4D3D-9F94-4892C6890BDB",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv630_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "99BD27B2-E055-4C52-A817-577384497F87",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv630:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42DC25E7-8C55-470A-B451-591A03CA2A40",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv632_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2DEE9E96-1DA5-4EBD-8847-EAE418215C11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv632:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "82B0632E-A55F-4EA8-A132-0D11CE38FDC6",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv640_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B22CDFFC-AF15-4883-95F4-CE4D191EC482",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv640:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C721EE7D-D046-4AEF-80FA-217B5684419E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:clv642_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E632CA7-141B-495B-8A57-BC06867842AA",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:clv642:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "651F0D5C-F7DA-41A6-B3C3-B48C0662C855",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms100_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "118835C2-4939-4601-935A-032028D58E84",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms100:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "31A7D324-DBC8-4EBC-8AA2-E42C33E5758C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms101_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF828DD0-095A-4784-8D1A-87F3CF361297",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms101:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B5ED872-0E79-4901-96D9-27CBA55DAEA3",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms111_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D69045C1-7EF8-4F8E-8940-1171DB40F9D9",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms111:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "67011E35-C9AB-40C5-8DCC-29FA82A5F880",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms153_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "63031071-D70A-440F-8735-801AEEC0CC0D",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms153:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "54A544C0-9ABD-46AD-B193-87C6EF7FF133",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms151_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A61E7FD6-BB7F-4FEB-A82F-6493B993C7D5",
              "versionEndExcluding": "2.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms151:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9D01238F-0776-493A-AD81-D0E14D2A4C71",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms133_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "B2054C96-9A9C-4FC8-8E8C-7D315BA73234",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms133:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B48111FA-BB11-4FF9-9CE0-42459229A60C",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms142_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A83F4309-6C29-48F6-A276-95E5BC8330FA",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms142:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "43602F20-5065-4965-BFC9-BFA581ED5ECC",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms143_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "55215A7C-B7D8-4D94-84FA-26939D9FAD1F",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms143:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "02F0ED4E-1AB0-4EAB-8D3F-E318DE3D51F1",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms131_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9543231B-6C33-4C66-95D0-1D2B49063F11",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms131:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9378A66C-EF01-4DFA-9E8C-4231FE0E8914",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms121_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "D8143104-4230-42EE-BA3C-73C10CA48667",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms121:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F9B7CE13-0E33-439B-866B-C0CD365919C5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms123_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D3E89AC-85E2-4279-87AC-31D89381F263",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms123:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EAB011CA-769D-4335-A57A-62B77AD9E0FF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms122_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCA825F2-A103-429B-BD61-08634033BA12",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms122:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7C689D72-3D25-4C3F-BBF5-15691D18F9BA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms141_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "0DB1AB8D-8116-46C1-8125-10DED10DE830",
              "versionEndExcluding": "2.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms141:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "24237BC0-BE8D-4EF8-A3C4-BEE1A8373481",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms511_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F113FA6F-F3CC-43C7-97A4-D40F8F1F5E9F",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms511:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9ABE387A-9B29-43DE-A4F1-EDD3CB8BEB6F",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms531_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5943B624-D730-4679-8118-CD29CFB4CD1C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms531:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "44AF5B79-0A15-4195-80F3-7304D8000D1A",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:lms500_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9DF24DAB-D1E4-4B14-B9CE-BFB52F9BDBC7",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:lms500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B8A37D4F-969C-4496-BD10-13C903A41305",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:sick:icr890-3.5_firmware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5D253F05-FCF4-4E90-BC55-CC838C2297F5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:sick:icr890-3.5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F8A72B7-8433-4EC6-8384-89A52E519A58",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Platform mechanism AutoIP allows remote attackers to reboot the device via a crafted packet in SICK AG solutions Bulkscan LMS111, Bulkscan LMS511, CLV62x \u2013 CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, MSC800, RFH."
    },
    {
      "lang": "es",
      "value": "El mecanismo de plataforma AutoIP permite a atacantes remotos reiniciar el dispositivo por medio de un paquete dise\u00f1ado en las soluciones de SICK AG Bulkscan LMS111, Bulkscan LMS511, CLV62x - CLV65x, ICR890-3, LMS10x, LMS11x, LMS15x, LMS12x, LMS13x, LMS14x, LMS5xx, LMS53x, RFH"
    }
  ],
  "id": "CVE-2020-2075",
  "lastModified": "2024-11-21T05:24:33.753",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-08-31T18:15:13.170",
  "references": [
    {
      "source": "psirt@sick.de",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt/#advisories"
    }
  ],
  "sourceIdentifier": "psirt@sick.de",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-703"
        }
      ],
      "source": "psirt@sick.de",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-755"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}