CVEvulnerability
CVE-2025-49182
9.8 CRITICAL
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-540
Description
Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Affected configurations
• sick media server (< 1.5)
Related
Weakness · CWE (1)
- CWE-540 Inclusion of Sensitive Information in Source Code weakness
References
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://sick.com/psirt Vendor Advisory
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf Vendor Advisory