Vulnerability Details CVE-2025-49182
Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 43.9%
CVSS Severity
CVSS v3 Score 7.5
References
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf
Products affected by CVE-2025-49182
-
cpe:2.3:a:sick:media_server:-
-
cpe:2.3:a:sick:media_server:1.4