CVEvulnerability
CVE-2025-49193
6.1 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-06-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.2 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-693
Description
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Affected configurations
• sick baggage analytics
• sick field analytics
• sick logistic diagnostic analytics
• sick media server (< 1.5)
• sick package analytics
• sick tire analytics
Related
Weakness · CWE (1)
- CWE-693 Protection Mechanism Failure weakness
References
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://sick.com/psirt Vendor Advisory
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf Vendor Advisory