CVE-2025-0867: Privilege Escalation in MEAC300
The standard user uses the run as function to start the MEAC applications with administrative privileges. To ensure that the system can startup on its own, the credentials of the administrator were stored. Consequently, the EPC2 user can execute any command with administrative privileges. This allows a privilege escalation to the administrative level.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-0867?
CVE-2025-0867 is considered a high-severity vulnerability due to the potential for unauthorized administrative command execution.
How do I fix CVE-2025-0867?
To fix CVE-2025-0867, ensure that administrative credentials are not stored in a manner that allows standard users to execute commands with elevated privileges.
What vulnerabilities does CVE-2025-0867 exploit?
CVE-2025-0867 exploits the 'run as' function in MEAC applications, allowing unauthorized users to gain administrative access.
Who is affected by CVE-2025-0867?
Users of the MEAC300-FNADE4 and similar applications are affected by CVE-2025-0867.
What is the impact of CVE-2025-0867?
The impact of CVE-2025-0867 includes the potential for a standard user to execute administrative commands, compromising system security.