CVE-2025-49192mediumCWE-1021

CVE-2025-49192: medium-severity vulnerability in SICK Field Analytics

Clickjacking

Published

Follow this CVE+ Monitor SICK Field Analytics+ Monitor SICK Media Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.3%
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Affected products
SICK AG · SICK Field AnalyticsSICK AG · SICK Media Server
Related CVEs — SICK Field Analytics

In the same product, most dangerous first.

CVE-2025-49182HIGHCredential disclosureEPSS 0.6%CVE-2025-49195MEDIUMNo protection against brute-force attacksEPSS 0.5%CVE-2025-49200MEDIUMUnencrypted backup contains sensitive informationEPSS 0.5%CVE-2025-49188MEDIUMSensitive Data in URLEPSS 0.4%CVE-2025-49187MEDIUMUser enumerationEPSS 0.4%CVE-2025-49181HIGHConfigurations endpoint does not require authorizationEPSS 0.4%