7.5Yüksek
CVE-2025-49182Credential disclosure
Açıklama
Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Zayıflık türü (CWE):
CWE-540
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| sick | media server | < 1.5 | |
| SICK AG | SICK Media Server | < 1.5 |
Kaynaklar ve yamalar
- https://sick.com/psirt Vendor Advisory
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisoryVendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:sick:media_server:*:*:*:*:*:*:*:*< 1.5