Privilege Escalation Vulnerability in MEAC Applications by SICK
CVE-2025-0867
9.9CRITICAL
What is CVE-2025-0867?
The MEAC applications by SICK contain a vulnerability allowing standard users to leverage the 'run as' function to start the applications with administrative privileges. This is due to the improper handling of credentials, where administrator credentials are stored to facilitate system startups. Consequently, an EPC2 user can execute arbitrary commands with administrative privileges, resulting in significant security risks.
Affected Version(s)
SICK MEAC300 0 < 4.0.54.21