Privilege escalation in Pocketbook Inkpad Color 3

CVE-2025-1425

A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on the device.This issue affects InkPad Color 3: U743k3.6.8.3671.

Vulnerability class: Privilege Escalation

EPSS: 0.002 (9.6th percentile) — read the EPSS interpretation.

Affected products

Pocketbook Inkpad Color 3 — versions U743k3.6.8.3671

Weakness classification (CWE)

CWE-269 — Improper Privilege Management

References

vulnerability@ncsc.ch (third-party-advisory)