What is CVE-2025-0867?

CVE-2025-0867 is a critical-severity vulnerability in Sick Ag Meac300, classified under Insufficiently Protected Credentials. CVSS score: 9.9/10. Published 2025-02-14.

How severe is CVE-2025-0867?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Vulnerability in Sick Ag Meac300

CVE-2025-0867

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can e…

EPSS: 0.006 (44.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Sick Ag Meac300 — versions 0

Weakness classification (CWE)

CWE-522 — Insufficiently Protected Credentials

References

psirt@sick.de (x_SICK PSIRT Website)
psirt@sick.de (x_SICK Operating Guidelines)
psirt@sick.de (x_ICS-CERT recommended practices on Industrial Security)
psirt@sick.de (x_CVSS v3.1 Calculator)
psirt@sick.de (vendor-advisory)
psirt@sick.de (vendor-advisory, x_csaf)

Frequently asked questions

What is CVE-2025-0867?: CVE-2025-0867 is a critical-severity vulnerability in Sick Ag Meac300, classified under Insufficiently Protected Credentials. CVSS score: 9.9/10. Published 2025-02-14.
How severe is CVE-2025-0867?: Critical severity. CVSS v3 base score is 9.9 out of 10.