Code Execution Risk in SDD Device Drivers by SICK
CVE-2025-27593

9.3CRITICAL

Key Information:

Vendor
Sick Ag
Status
Sick Dl100-2xxxxxxx
Vendor
CVE Published:
14 March 2025

Summary

The SICK SDD Device Drivers are vulnerable to a security flaw that permits the distribution of malicious code due to the lack of comprehensive download verification checks. This oversight can lead to unauthorized code execution on target systems, potentially compromising system integrity and exposing organizations to significant security risks.

Affected Version(s)

SICK DL100-2xxxxxxx all versions

References

https://sick.com/psirt
x_SICK PSIRT Website
https://cdn.sick.com/media/docs/1/11/411/Special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Leonard Lewedei
.