CVE-2025-0592— SICK Lector8xx and InspectorP8xx vulnerable for code execution
Quick assessment
Affected
SICK AG SICK Lector8xx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SICK Lector8xx和SICK InspectorP8xx都是德国SICK公司的产品。SICK Lector8xx是一款2D激光扫描条形码阅读器。SICK InspectorP8xx是一款高性能2D激光扫描传感器。 SICK InspectorP8xx 3.11.1之前版本和SICK Lector8xx 2.4.0之前版本存在安全漏洞，该漏洞源于允许攻击者通过操纵固件文件并将其上传到设备来运行任意shell命令。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0592
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SICK Lector8xx and InspectorP8xx vulnerable for code execution
Source: CVE Program / CVE List V5
Vulnerability Description
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by manipulating the firmware file and uploading it to the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
通信信道中传输过程中消息完整性的不正确执行
Source: CVE Program / CVE List V5
Vulnerability Title
SICK InspectorP8xx和SICK Lector8xx 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SICK Lector8xx和SICK InspectorP8xx都是德国SICK公司的产品。SICK Lector8xx是一款2D激光扫描条形码阅读器。SICK InspectorP8xx是一款高性能2D激光扫描传感器。 SICK InspectorP8xx 3.11.1之前版本和SICK Lector8xx 2.4.0之前版本存在安全漏洞，该漏洞源于允许攻击者通过操纵固件文件并将其上传到设备来运行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SICK AG | SICK Lector8xx | 0 ~ 2.4.0 | - |
|
| SICK AG | SICK InspectorP8xx | 0 ~ 3.11.1 | - |
|
II. Public POCs for CVE-2025-0592
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0592
请登录查看更多情报信息。
Same Patch Batch · SICK AG · 2025-02-14 · 3 CVEs total
| CVE-2025-0867 | 9.9 CRITICAL | Privilege Escalation in MEAC300 |
| CVE-2025-0593 | 8.8 HIGH | SICK Lector8xx and InspectorP8xx vulnerable for code execution |
IV. Related Vulnerabilities
Same weakness: CWE-924
-
CVE-2026-85104
Brain stimulation parameters can be modified via Bluetooth i -
CVE-2026-14681
PostgreSQL improper enforcement of GSSAPI encryption when co -
CVE-2026-13584
Information tampering and Denial-of-service (DoS) vulnerabil -
CVE-2026-54891
Plaintext APPLICATION_DATA injected during TLS handshake del -
CVE-2026-12576
DVP80ES3 Improper Enforcement of Message Integrity During Tr
V. Comments for CVE-2025-0592
No comments yet