CVE-2025-0593— SICK Lector8xx and InspectorP8xx vulnerable for code execution
Quick assessment
Affected
SICK AG SICK Lector8xx
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SICK Lector8xx和SICK InspectorP8xx都是德国SICK公司的产品。SICK Lector8xx是一款2D激光扫描条形码阅读器。SICK InspectorP8xx是一款高性能2D激光扫描传感器。 SICK InspectorP8xx 3.11.1之前版本和SICK Lector8xx 2.4.0之前版本存在安全漏洞，该漏洞源于允许攻击者通过使用较低级别的函数与设备交互来运行任意shell命令。
Possible ATT&CK Techniques 1 AI
T1059 · Command and Scripting Interpreter
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0593
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
SICK Lector8xx and InspectorP8xx vulnerable for code execution
Source: CVE Program / CVE List V5
Vulnerability Description
The vulnerability may allow a remote low priviledged attacker to run arbitrary shell commands by using lower-level functions to interact with the device.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在命令中使用的特殊元素转义处理不恰当(命令注入)
Source: CVE Program / CVE List V5
Vulnerability Title
SICK Lector8xx和SICK InspectorP8xx 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SICK Lector8xx和SICK InspectorP8xx都是德国SICK公司的产品。SICK Lector8xx是一款2D激光扫描条形码阅读器。SICK InspectorP8xx是一款高性能2D激光扫描传感器。 SICK InspectorP8xx 3.11.1之前版本和SICK Lector8xx 2.4.0之前版本存在安全漏洞，该漏洞源于允许攻击者通过使用较低级别的函数与设备交互来运行任意shell命令。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SICK AG | SICK Lector8xx | 0 ~ 2.4.0 | - |
|
| SICK AG | SICK InspectorP8xx | 0 ~ 3.11.1 | - |
|
II. Public POCs for CVE-2025-0593
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0593
请登录查看更多情报信息。
Same Patch Batch · SICK AG · 2025-02-14 · 3 CVEs total
| CVE-2025-0867 | 9.9 CRITICAL | Privilege Escalation in MEAC300 |
| CVE-2025-0592 | 8.8 HIGH | SICK Lector8xx and InspectorP8xx vulnerable for code execution |
IV. Related Vulnerabilities
Same weakness: CWE-77
-
CVE-2026-78141
Tenda CH22 exeCommand formexeCommand command injection -
CVE-2026-78063
Tenda CH22 editFileName formeditFileName command injection -
CVE-2026-77988
TRENDnet TEW-823DRU CLI Configuration Tool nvram_get command -
CVE-2026-77945
TRENDnet TEW-821DAP ssi upload.cgi command injection -
CVE-2026-77683
Comfast CF-N1-S mbox-config system command injection
V. Comments for CVE-2025-0593
No comments yet