CVE-2025-0867

CVE-2025-0867 describes a critical privilege escalation vulnerability where a standard user can execute MEAC applications with administrative privileges. This is due to improperly stored administrator credentials, allowing any EPC2 user to run arbitrary commands at an administrative level. With a CVSS score of 9.9 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and results in complete compromise of confidentiality, integrity, and availability. While there is no known active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.