CNNVD-202506-1666 Information

CNNVD ID

CNNVD-202506-1666

CVE-2025-49184

  • CNNVD Published: 2025-06-12

Description (Chinese)

SICK Field Analytics和SICK Media Server都是德国SICK公司的产品。SICK Field Analytics是一款用于评估制造数据的软件。SICK Media Server是一款媒体服务器。 SICK Field Analytics 和SICK Media Server存在安全漏洞,该漏洞源于产品配置设置缺少授权,可能导致信息泄露。

Description (English)

SICK Field Analytics and SICK Media Server are products of SICK Germany. SICK Field Analytics is a software for assessing manufacturing data. SICK Media Server is a media server. There is a security gap between SICK Field Analytics and SICK Media Server, which stems from a lack of authorization for product configuration, which could lead to the disclosure of information.

Hazard Level

Medium

Vulnerability Type

信息泄露

Affected Vendor

西克

Published

2025-06-12

Last Modified

2026-02-24

References

https://sick.com/psirt https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf https://www.first.org/cvss/calculator/3.1 https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json https://nvd.nist.gov/vuln/detail/CVE-2025-49184 https://access.redhat.com/security/cve/cve-2025-49184

Patch

https://www.sick.com/de/en/service-and-support/the-sick-product-security-incident-response-team-sick-psirt/w/psirt

Share on: