CVE-2025-27460

The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an attacker with physical access to the device to use an alternative operating system to interact with the hard drives, completely circumventing the Windows login. The attacker can read from and write to all files on the hard drives.

CVSS v3 7.6 HIGH

7.6^/10

CVSS v3 : HIGH

Vector :

Exploitability : 0.9 / Impact : 6.0

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://sick.com/psirt	Vendor Advisory
https://sick.com/psirt	Vendor Advisory
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices	US Government Resource
https://www.endress.com	Product
https://www.first.org/cvss/calculator/3.1	Not Applicable
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json	Vendor Advisory
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:*

cpe:2.3:h:endress:meac300-fnade4:-:*:*:*:*:*:*:*

History

No history.

Information

Published : 2025-07-03 12:15

Updated : 2026-02-06 14:39

NVD link : CVE-2025-27460

Mitre link : CVE-2025-27460

CVE.ORG link : CVE-2025-27460

JSON object : View

Products Affected

endress

meac300-fnade4_firmware
meac300-fnade4

CWE

CWE-312

Cleartext Storage of Sensitive Information

CWE-326

Inadequate Encryption Strength

{"id": "CVE-2025-27460", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@sick.de", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.6, "attackVector": "PHYSICAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.8, "attackVector": "PHYSICAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 0.9}]}, "published": "2025-07-03T12:15:24.203", "references": [{"url": "https://sick.com/psirt", "tags": ["Vendor Advisory"], "source": "psirt@sick.de"}, {"url": "https://sick.com/psirt", "tags": ["Vendor Advisory"], "source": "psirt@sick.de"}, {"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", "tags": ["US Government Resource"], "source": "psirt@sick.de"}, {"url": "https://www.endress.com", "tags": ["Product"], "source": "psirt@sick.de"}, {"url": "https://www.first.org/cvss/calculator/3.1", "tags": ["Not Applicable"], "source": "psirt@sick.de"}, {"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.json", "tags": ["Vendor Advisory"], "source": "psirt@sick.de"}, {"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0008.pdf", "tags": ["Vendor Advisory"], "source": "psirt@sick.de"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@sick.de", "description": [{"lang": "en", "value": "CWE-312"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-326"}]}], "descriptions": [{"lang": "en", "value": "The hard drives of the device are not encrypted using a full volume encryption feature such as BitLocker. This allows an attacker with physical access to the device to use an alternative operating system to interact with the hard drives, completely circumventing the Windows login. The attacker can read from and write to all files on the hard drives."}, {"lang": "es", "value": "Los discos duros del dispositivo no est\u00e1n cifrados con una funci\u00f3n de cifrado de volumen completo como BitLocker. Esto permite a un atacante con acceso f\u00edsico al dispositivo usar un sistema operativo alternativo para interactuar con los discos duros, evadiendo por completo el inicio de sesi\u00f3n de Windows. El atacante puede leer y escribir en todos los archivos de los discos duros."}], "lastModified": "2026-02-06T14:39:36.433", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:endress:meac300-fnade4_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6974A7C-0F9F-4B43-8272-AFE330F0D034"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:endress:meac300-fnade4:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "EDCFDEA0-D85E-464F-98FD-42775C42812F"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@sick.de"}