Detections
Analytics

CVE-2025-27593

critical

Description

The product can be used to distribute malicious code using SDD Device Drivers due to missing download verification checks, leading to code execution on target systems.

References

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.pdf

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0004.json

https://www.first.org/cvss/calculator/3.1

https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

https://sick.com/psirt

https://github.security.telekom.com/2025/03/multiple-vulnerabilities-in-sick-dl100.html

https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF

Details

Source: Mitre, NVD

Published: 2025-03-14

Updated: 2026-04-15

Risk Information

CVSS v2

Base Score: 9.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:N

Severity: High

CVSS v3

Base Score: 9.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.00035