CVE-2025-0867 | The standard user uses the run as function to start the MEAC… | CVSS 9.9 CRITICAL

Description

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This allows a privilege escalation to the administrative level.

Metadata

CVE ID: CVE-2025-0867
State: PUBLISHED
Assigner: SICK AG
Reserved: 2025-01-30 08:11 UTC
Published: 2025-02-14 12:37 UTC
Last updated: 2025-02-21 14:16 UTC
Primary CWE: CWE-522
CWE-522 Insufficiently Protected Credentials
Vendor / Product: SICK AG / SICK MEAC300
Sources: cve.org · NVD

Severity & Metrics

9.9 CRITICAL CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

SSVC — CISA Coordinator

Exploitation: none
Automatable: no
Tech. Impact: total

Affected products (1)

Vendor	Product	Platform	Versions
SICK AG	SICK MEAC300	—	0 < 4.0.54.21

Weakness (CWE)

CWE	Source	Description
CWE-522	cna	CWE-522 Insufficiently Protected Credentials

CVSS scores (1)

Score	Severity	Version	Source	Vector
9.9	CRITICAL	3.1	cna	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References (6)