CVE-2025-49192mediumCWE-1021

CVE-2025-49192: falha de média gravidade em SICK Field Analytics

Clickjacking

Publicada em

Seguir esta CVE+ Monitorar SICK Field Analytics+ Monitorar SICK Media Server

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.3%
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Produtos afetados
SICK AG · SICK Field AnalyticsSICK AG · SICK Media Server
CVEs relacionadas — SICK Field Analytics

No mesmo produto, das mais perigosas para as menos.

CVE-2025-49182HIGHCredential disclosureEPSS 0.6%CVE-2025-49195MEDIUMNo protection against brute-force attacksEPSS 0.5%CVE-2025-49200MEDIUMUnencrypted backup contains sensitive informationEPSS 0.5%CVE-2025-49188MEDIUMSensitive Data in URLEPSS 0.4%CVE-2025-49187MEDIUMUser enumerationEPSS 0.4%CVE-2025-49181HIGHConfigurations endpoint does not require authorizationEPSS 0.4%