CVE-2025-0867

CRITICAL

SICK MEAC300 < 4.0.54.21 - Privilege Escalation via Stored Administrator Credentials

Title source: llm
STIX 2.1

Description

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This allows a privilege escalation to the administrative level.

References (6)

Core 6
Core References
Various Sources x_sick psirt website
https://sick.com/psirt
Third Party Advisory, US Government Resource x_ics-cert recommended practices on industrial security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Various Sources x_cvss v3.1 calculator
https://www.first.org/cvss/calculator/3.1

Scores

CVSS v3 9.9
EPSS 0.0060
EPSS Percentile 44.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-522
Status published
Products (1)
SICK AG/SICK MEAC300 < 4.0.54.21
Published Feb 14, 2025
Tracked Since Feb 18, 2026