CVE-2025-49183highCWE-319

CVE-2025-49183: high-severity vulnerability in SICK Media Server

Unencrypted communication (HTTP)

Published · Updated

Follow this CVE+ Monitor SICK Media Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.3%
All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
SICK AG · SICK Media Server
Related CVEs — SICK Media Server

In the same product, most dangerous first.

CVE-2025-49182HIGHCredential disclosureEPSS 0.6%CVE-2025-49195MEDIUMNo protection against brute-force attacksEPSS 0.5%CVE-2025-49181HIGHConfigurations endpoint does not require authorizationEPSS 0.4%CVE-2025-49198LOWPoor quality of randomness in authorization tokensEPSS 0.4%CVE-2025-49192MEDIUMClickjackingEPSS 0.3%CVE-2025-49194HIGHUnencrypted communicationEPSS 0.3%