CVE-2025-0593— SICK Lector8xx and InspectorP8xx vulnerable for code execution
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-0593
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SICK Lector8xx and InspectorP8xx vulnerable for code execution
Source: NVD (National Vulnerability Database)
Vulnerability Description
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: NVD (National Vulnerability Database)
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: NVD (National Vulnerability Database)
Vulnerability Title
SICK Lector8xx和SICK InspectorP8xx 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SICK Lector8xx和SICK InspectorP8xx都是德国SICK公司的产品。SICK Lector8xx是一款2D激光扫描条形码阅读器。SICK InspectorP8xx是一款高性能2D激光扫描传感器。 SICK InspectorP8xx 3.11.1之前版本和SICK Lector8xx 2.4.0之前版本存在安全漏洞，该漏洞源于允许攻击者通过使用较低级别的函数与设备交互来运行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SICK AG | SICK Lector8xx | 0 ~ 2.4.0 | - | |
| SICK AG | SICK InspectorP8xx | 0 ~ 3.11.1 | - |
II. Public POCs for CVE-2025-0593
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0593
请登录查看更多情报信息。
Same Patch Batch · SICK AG · 2025-02-14 · 3 CVEs total
| CVE-2025-0867 | 9.9 CRITICAL | Privilege Escalation in MEAC300 |
| CVE-2025-0592 | 8.8 HIGH | SICK Lector8xx and InspectorP8xx vulnerable for code execution |
IV. Related Vulnerabilities
Same weakness: CWE-77
- CVE-2026-8210
aandrew-me tgpt Update helper.go helper.Update command injec - CVE-2026-42258
net-imap: Command Injection via unvalidated Symbol inputs - CVE-2026-42453
Termix: Command injection in extractArchive/compressFiles vi - CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test - CVE-2026-41500
electerm has Command Injection Vulnerability via runMac func
V. Comments for CVE-2025-0593
No comments yet