4.3Medium
CVE-2025-49192Clickjacking
Description
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
Weakness (CWE):
CWE-1021
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| sick | field analytics | — | |
| sick | media server | < 1.5 | |
| SICK AG | SICK Field Analytics | all versions | |
| SICK AG | SICK Media Server | < 1.5 |
References and patches
- https://sick.com/psirt Vendor Advisory
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisoryVendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisoryVendor Advisory
CPE matches (NVD) (2)
cpe:2.3:a:sick:field_analytics:-:*:*:*:*:*:*:*cpe:2.3:a:sick:media_server:*:*:*:*:*:*:*:*< 1.5