SCA-2025-0002

Vulnerability from csaf_sick - Published: 2025-02-14 10:19 - Updated: 2025-02-14 10:19
Summary
Vulnerability in SICK Lector8xx and SICK InspectorP8xx
Notes
summary: SICK has found two vulnerabilities that affect the SICK Lector8xx and SICK InspectorP8xx. The vulnerabilities may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file or executing low-level functions. SICK is currently not aware of any public exploits.
General Security Measures: As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.
Vulnerability Classification: SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer’s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.
CVE-2025-0592
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-924 - Improper Enforcement of Message Integrity During Transmission in a Communication Channel
Affected products
Product Identifier Version Remediation
Unresolved product id: CSAFPID-0003 —
Unresolved product id: CSAFPID-0006 —
Product Identifier Version Remediation
Unresolved product id: CSAFPID-0099 —
Vendor Fix
Unresolved product id: CSAFPID-0098 —
Vendor Fix
Product Identifier Version Remediation
Unresolved product id: CSAFPID-0003 —
Unresolved product id: CSAFPID-0006 —
CVE-2025-0593
8.8 (High)
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-77 - Improper Neutralization of Special Elements used in a Command ('Command Injection')
Affected products
Fixed 2 products, the same list as for CVE-2025-0592
Known affected 2 products, the same list as for CVE-2025-0592
Recommended 2 products, the same list as for CVE-2025-0592
References
To clipboard 

{
  "document": {
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "summary",
        "text": "SICK has found two vulnerabilities that affect the SICK Lector8xx and SICK InspectorP8xx.\nThe vulnerabilities may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file or executing low-level functions. \n\nSICK is currently not aware of any public exploits. \n",
        "title": "summary"
      },
      {
        "category": "general",
        "text": "As general security measures, SICK recommends to minimize network exposure of the devices, restrict network access and follow recommended security practices in order to run the devices in a protected IT environment.",
        "title": "General Security Measures"
      },
      {
        "category": "general",
        "text": "SICK performs vulnerability classification by using the CVSS scoring system (*CVSS v3.1*). The environmental score is dependent on the customer\u2019s environment and can affect the overall CVSS score. SICK recommends that customers individually evaluate the environmental score to achieve final scoring.",
        "title": "Vulnerability Classification"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "psirt@sick.de",
      "issuing_authority": "SICK PSIRT is responsible for any vulnerabilities related to SICK products.",
      "name": "SICK PSIRT",
      "namespace": "https://www.sick.com/psirt"
    },
    "references": [
      {
        "summary": "SICK PSIRT Security Advisories",
        "url": "https://sick.com/psirt"
      },
      {
        "summary": "SICK Operating Guidelines",
        "url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"
      },
      {
        "summary": "ICS-CERT recommended practices on Industrial Security",
        "url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"
      },
      {
        "summary": "CVSS v3.1 Calculator",
        "url": "https://www.first.org/cvss/calculator/3.1"
      },
      {
        "category": "self",
        "summary": "The canonical URL.",
        "url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0002.json"
      },
      {
        "summary": "Lector85x operating instructions",
        "url": "https://cdn.sick.com/media/docs/8/48/648/operating_instructions_lector85x_can_i_o_image_based_code_reader_en_im0101648.pdf"
      },
      {
        "summary": "Inspector83x operating instructions",
        "url": "https://cdn1.npcdn.net/userfiles/19423/attachment/5023455/20240604_86cc78525f735019023e2f3f65d5c9b9/operating_instructions_inspector83x_2d_machine_vision_en_im0108639.pdf"
      }
    ],
    "title": "Vulnerability in SICK Lector8xx and SICK InspectorP8xx",
    "tracking": {
      "current_release_date": "2025-02-14T10:19:00.000Z",
      "generator": {
        "date": "2025-02-14T12:03:29.461Z",
        "engine": {
          "name": "Secvisogram",
          "version": "2.5.19"
        }
      },
      "id": "SCA-2025-0002",
      "initial_release_date": "2025-02-14T10:19:00.000Z",
      "revision_history": [
        {
          "date": "2025-02-14T10:19:00.000Z",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2025-07-30T07:30:49.000Z",
          "number": "2",
          "summary": "Updated Advisory: URL for SICK Operating Guidelines has been updated"
        }
      ],
      "status": "final",
      "version": "2"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK InspectorP8xx all versions",
                  "product_id": "CSAFPID-0001"
                }
              }
            ],
            "category": "product_name",
            "name": "InspectorP8xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=3.11.1",
                "product": {
                  "name": "SICK InspectorP8xx all firmware versions \u003e=3.11.1",
                  "product_id": "CSAFPID-0002"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c 3.11.1",
                "product": {
                  "name": "SICK InspectorP8xx all firmware versions \u003c 3.11.1",
                  "product_id": "CSAFPID-0007"
                }
              }
            ],
            "category": "product_name",
            "name": "InspectorP8xx Firmware"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:all/*",
                "product": {
                  "name": "SICK Lector8xx all versions",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Lector8xx"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003e=2.4.0",
                "product": {
                  "name": "SICK Lector8xx all firmware versions \u003e=2.4.0",
                  "product_id": "CSAFPID-0005"
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c 2.4.0",
                "product": {
                  "name": "SICK Lector8xx all firmware versions \u003c 2.4.0",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "Lector8xx Firmware"
          }
        ],
        "category": "vendor",
        "name": "SICK AG"
      }
    ],
    "relationships": [
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK InspectorP8xx all firmware versions \u003e=3.11.1",
          "product_id": "CSAFPID-0003"
        },
        "product_reference": "CSAFPID-0002",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Lector8xx all firmware versions \u003e=2.4.0 ",
          "product_id": "CSAFPID-0006"
        },
        "product_reference": "CSAFPID-0005",
        "relates_to_product_reference": "CSAFPID-0004"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK InspectorP8xx firmware versions \u003c3.11.1",
          "product_id": "CSAFPID-0099"
        },
        "product_reference": "CSAFPID-0007",
        "relates_to_product_reference": "CSAFPID-0001"
      },
      {
        "category": "installed_on",
        "full_product_name": {
          "name": "SICK Lector8xx firmware versions \u003c2.4.0",
          "product_id": "CSAFPID-0098"
        },
        "product_reference": "CSAFPID-0008",
        "relates_to_product_reference": "CSAFPID-0004"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-0592",
      "cwe": {
        "id": "CWE-924",
        "name": "Improper Enforcement of Message Integrity During Transmission in a Communication Channel"
      },
      "discovery_date": "2025-02-14T11:00:00.000Z",
      "notes": [
        {
          "audience": "all",
          "category": "summary",
          "text": "The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device. ",
          "title": "Summary"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0003",
          "CSAFPID-0006"
        ],
        "known_affected": [
          "CSAFPID-0099",
          "CSAFPID-0098"
        ],
        "recommended": [
          "CSAFPID-0003",
          "CSAFPID-0006"
        ]
      },
      "release_date": "2025-02-14T11:00:00.000Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-16T09:19:00.000Z",
          "details": "Users are strongly recommended to upgrade to the latest release\nof the Lector8xx (\u003e=2.4.0) and the InspectorP8xx (\u003e=3.11.1) respectively that includes a patch for the vulnerability. It is also recommended to set a secure password, please refer  to the respective operating instructions, linked in the reference section. ",
          "product_ids": [
            "CSAFPID-0099",
            "CSAFPID-0098"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.8,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 8.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0099",
            "CSAFPID-0098"
          ]
        }
      ],
      "title": "Firmware vulnerabilitiy"
    },
    {
      "cve": "CVE-2025-0593",
      "cwe": {
        "id": "CWE-77",
        "name": "Improper Neutralization of Special Elements used in a Command (\u0027Command Injection\u0027)"
      },
      "discovery_date": "2025-02-14T11:00:00.000Z",
      "notes": [
        {
          "audience": "all",
          "category": "summary",
          "text": "The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device. ",
          "title": "Summary"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0003",
          "CSAFPID-0006"
        ],
        "known_affected": [
          "CSAFPID-0099",
          "CSAFPID-0098"
        ],
        "recommended": [
          "CSAFPID-0003",
          "CSAFPID-0006"
        ]
      },
      "release_date": "2025-02-14T11:00:00.000Z",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2024-09-16T09:19:00.000Z",
          "details": "Users are strongly recommended to upgrade to the latest release\nof the Lector8xx (\u003e=2.4.0) and the InspectorP8xx (\u003e=3.11.1) respectively that includes a patch for the vulnerability. It is also recommended to set a secure password, please refer to the respective operating instructions, linked in the reference section. ",
          "product_ids": [
            "CSAFPID-0099",
            "CSAFPID-0098"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "environmentalScore": 8.8,
            "environmentalSeverity": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "temporalScore": 8.8,
            "temporalSeverity": "HIGH",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0099",
            "CSAFPID-0098"
          ]
        }
      ],
      "title": "Low-level function vulnerabilitiy "
    }
  ]
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.