Sudo vulnerability affects SICK SID products
Advisory ansehen veröffentlicht 2025-10-27
SICK SID products are affected by the sudo vulnerability CVE-2025-32463. SICK strongly recommends to update to the latest version to mitigate the risk.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-32463US | high7.8OT kritisch | KEV | ||
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directory is used with the --chroot option. | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- BehobenSICK SID121 LFT with Firmware < 4.2.7
It is strongly recommended to upgrade to the latest version (4.2.7)
- BehobenSICK SID121 with Firmware < 4.2.7
It is strongly recommended to upgrade to the latest version (4.2.7)
- BehobenSICK SID71 LFT with Firmware < 4.2.7
It is strongly recommended to upgrade to the latest version (4.2.7)
- BehobenSICK SID71 with Firmware < 4.2.7
It is strongly recommended to upgrade to the latest version (4.2.7)
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan