EUVD-2025-1903

Malicious code in bioql PyPI...

The vulnerability of the EPC2 component of the microprogramming software for the industrial digital gas analyzer MEAC300-FNADE4 allows a intruder to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the EPC2 component in the Windows microprogramming software of the industrial digital gas analyzer MEAC300-FNADE4 is related to the absence of authentication. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and accessibility of...

CVE-2025-0867

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This...

CVE-2025-0867

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This...

CVE-2025-0867

CVE-2025-0867 affects SICK MEAC300 (and variants such as MEAC300-FNADE4). Root cause: a standard user can start MEAC applications via the Run As function while administrator credentials are stored, enabling EPC2 to execute commands with administrative privileges and perform privilege escalation. ...

CVE-2025-0867: Insufficiently Protected Credentials

The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This...

MEAC affected by Windows SMBv1 vulnerability

Microsoft disclosed a critical security vulnerability in the Microsoft Server Message Block 1.0 SMBv1 back in 2017. A successful exploitation of this vulnerability could lead to remote code execution with administrator privileges...