← All advisories

High severity7.6NVD Advisory· Published Jul 3, 2025· Updated Jun 17, 2026

CVE-2025-27461

CVE-2025-27461

Description

During startup, the device automatically logs in the EPC2 Windows user without requesting a password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Endress+Hauser/Endress+Hauser MEAC300-FNADE4v5
Range: vers:all/*
SICK AG/EPC2llm-create
Endress/Meac300 Fnade4 Firmware
cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

6

sick.com/psirtnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.jsonnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdfnvdVendor Advisory
www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvdUS Government Resource
www.endress.comnvdProduct
www.first.org/cvss/calculator/3.1nvdNot Applicable

News mentions

0

No linked articles in our index yet.