4.3Orta
CVE-2025-49192Clickjacking
Açıklama
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
Zayıflık türü (CWE):
CWE-1021
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| sick | field analytics | — | |
| sick | media server | < 1.5 | |
| SICK AG | SICK Field Analytics | all versions | |
| SICK AG | SICK Media Server | < 1.5 |
Kaynaklar ve yamalar
- https://sick.com/psirt Vendor Advisory
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisoryVendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (2)
cpe:2.3:a:sick:field_analytics:-:*:*:*:*:*:*:*cpe:2.3:a:sick:media_server:*:*:*:*:*:*:*:*< 1.5