SCA-2025-0014

csafDEsick_psirt

CodeMeter vulnerablity affects SICK CODE-LOC and SICK LIDAR-LOC

view advisory published 2025-11-03

A vulnerability in the CodeMeter runtime affects the SICK products SICK CODE-LOC and SICK LIDAR-LOC. This could potentially affect the integrity, confidentiality and availability of the products. Only systems running on Microsoft Windows are affected. Furthermore, the systems are only affected when running the installation and keeping the Control Center component open. As soon as the system has been restarted, it is no longer affected by the vulnerability. Nevertheless, SICK strongly recommends to upgrade to the latest version of the products to mitigate the risk. Currently, SICK is not aware of any public exploits.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2025-47809US——
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot). For exploitation, there must have been an unprivileged…
02

references

External citations — patches, advisories, analysis.

03

remediations (2)

  • FixedSICK CODE-LOC with Firmware < LLS-2.8.1.24092R

    On Microsoft Windows systems, it is strongly recommended to upgrade to the latest version (LLS-2.8.1.24092R).

  • FixedSICK LIDAR-LOC with Firmware < LLS-2.8.1.24092R

    On Microsoft Windows systems, it is strongly recommended to upgrade to the latest version (LLS-2.8.1.24092R).

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan