Vulnerability · Published Feb 14, 2025 · Assigned by SICK AG
CVE-2025-0593SICK Lector8xx and InspectorP8xx vulnerable for code execution
High 8.8
In plain English
A high-severity command injection in SICK InspectorP8xx from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 56% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.8%top 43.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SICK AG | SICK Lector8xx | 0 – before 2.4.0 |
| SICK AG | SICK InspectorP8xx | 0 – before 3.11.1 |
Weakness: CWE-77 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://sick.com/psirt x_SICK PSIRT Website
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF x_ICS-CERT recommended practices on Industrial Security
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices x_ICS-CERT recommended practices on Industrial Security
- https://www.first.org/cvss/calculator/3.1 x_CVSS v3.1 Calculator
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.pdf vendor-advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.json vendor-advisory, x_csaf