Critical 1 exploited CVE SCA-2025-0012 1 CVE

Sudo vulnerability affects SICK SID products

Published Oct 27, 2025 · Updated Oct 27, 2025

Vendor: SICK Product: SID121 Product: SID121 firmware Product: SID121 LFT Product: SID121 LFT firmware Product: SID71 Product: SID71 firmware Product: SID71 LFT Product: SID71 LFT firmware

Summary

SICK SID products are affected by the sudo vulnerability CVE-2025-32463. SICK strongly recommends to update to the latest version to mitigate the risk.

Vulnerabilities 1

Critical 9.3

CVE-2025-32463 Exploited Public exploit EPSS 56%

Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…

sudo-project sudo sudo sudo Debian Ubuntu Azure Linux Alpine Wolfi

Jun 30, 2025
KEV Sep 29, 2025

Revision history

2025-10-27 #1
Initial version

References

SICK PSIRT Security Advisories
https://sick.com/psirt
SICK Operating Guidelines
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
ICS-CERT recommended practices on Industrial Security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1