Vulnerability · Published Feb 14, 2025 · Assigned by SICK AG
CVE-2025-0592SICK Lector8xx and InspectorP8xx vulnerable for code execution
High 8.8
In plain English
A high-severity security flaw in SICK InspectorP8xx from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.4%top 70.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SICK AG | SICK Lector8xx | 0 – before 2.4.0 |
| SICK AG | SICK InspectorP8xx | 0 – before 3.11.1 |
Weakness: CWE-924 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://sick.com/psirt x_SICK PSIRT Website
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF x_ICS-CERT recommended practices on Industrial Security
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices x_ICS-CERT recommended practices on Industrial Security
- https://www.first.org/cvss/calculator/3.1 x_CVSS v3.1 Calculator
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.pdf vendor-advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.json vendor-advisory, x_csaf