7.5Hoch
CVE-2025-49182Credential disclosure
Beschreibung
Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Schwachstellentyp (CWE):
CWE-540
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| sick | media server | < 1.5 | |
| SICK AG | SICK Media Server | < 1.5 |
Referenzen und Patches
- https://sick.com/psirt Vendor Advisory
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisoryVendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (1)
cpe:2.3:a:sick:media_server:*:*:*:*:*:*:*:*< 1.5