CVE-2025-1425CWE-269

File Read Through Improper Sudo Privilege Management

Medium · published March 4, 2025

CVSS v4.0
4.7
EPSS
0%
Percentile
10.4
In the wild
Unconfirmed
What it is

A Sudo privilege misconfiguration vulnerability in PocketBook InkPad Color 3 on Linux, ARM allows attackers to read file contents on the device.This issue affects InkPad Color 3: U743k3.6.8.3671.

The record
Technical detail
CVSS v4.0
4.7 · MEDIUM
Vector
CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H
EPSS
0.00208 · 10.4th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2025-03-04T15:24Z
EPSS history
Timeline
  • 04 MAR 15:24Z
    File Read Through Improper Sudo Privilege Management
    cvelistv5