Privilege Escalation Vulnerability in MEAC Applications by SICK

CVE-2025-0867

Summary

The MEAC applications by SICK contain a vulnerability allowing standard users to leverage the 'run as' function to start the applications with administrative privileges. This is due to the improper handling of credentials, where administrator credentials are stored to facilitate system startups. Consequently, an EPC2 user can execute arbitrary commands with administrative privileges, resulting in significant security risks.

References