4.3Media
CVE-2025-49192Clickjacking
Descripción
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
Debilidad (CWE):
CWE-1021
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| sick | field analytics | — | |
| sick | media server | < 1.5 | |
| SICK AG | SICK Field Analytics | all versions | |
| SICK AG | SICK Media Server | < 1.5 |
Referencias y parches
- https://sick.com/psirt Vendor Advisory
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisoryVendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (2)
cpe:2.3:a:sick:field_analytics:-:*:*:*:*:*:*:*cpe:2.3:a:sick:media_server:*:*:*:*:*:*:*:*< 1.5