CVE-2025-0867: The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the…

PriorityP260critical9.9CVSS 3.1

AVNACLPRLUINSCCHIHAH

EPSS

0.60%

44.4th percentile

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This allows a privilege escalation to the administrative level.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sick_ag	sick_meac300	< 4.0.54.21	4.0.54.21

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.