Privilege escalation in Pocketbook Inkpad Color 3

CVE-2025-1424

A privilege escalation vulnerability in PocketBook InkPad Color 3 allows attackers to escalate to root privileges if they gain physical access to the device. This issue affects InkPad Color 3 in version U743k3.6.8.3671.

Vulnerability class: Privilege Escalation

EPSS: 0.002 (9.2th percentile) — read the EPSS interpretation.

Affected products

Pocketbook Inkpad Color 3 — versions U743k3.6.8.3671

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

vulnerability@ncsc.ch (exploit, third-party-advisory)