CVE-2025-49184

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-49184
A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF Broken Link
https://sick.com/psirt Vendor Advisory
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
https://www.first.org/cvss/calculator/3.1 Not Applicable
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json Vendor Advisory
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*
History

29 Jan 2026, 17:58

Type Values Removed Values Added
First Time Sick field Analytics
Sick enterprise Analytics
Sick tire Analytics
Sick
Sick logistic Diagnostic Analytics
Sick baggage Analytics
Sick package Analytics
CPE cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*
References () https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF - () https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF - Broken Link
References () https://sick.com/psirt - () https://sick.com/psirt - Vendor Advisory
References () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource
References () https://www.first.org/cvss/calculator/3.1 - () https://www.first.org/cvss/calculator/3.1 - Not Applicable
References () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json - () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json - Vendor Advisory
References () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf - () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf - Vendor Advisory
Summary
  • (es) Un atacante remoto no autorizado puede recopilar información confidencial de la aplicación, debido a la falta de autorización de las opciones de configuración del producto.

12 Jun 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-12 14:15

Updated : 2026-01-29 17:58

NVD link : CVE-2025-49184

Mitre link : CVE-2025-49184

CVE.ORG link : CVE-2025-49184

JSON object : View

Products Affected

sick

  • package_analytics
  • logistic_diagnostic_analytics
  • field_analytics
  • tire_analytics
  • baggage_analytics
  • enterprise_analytics
CWE
CWE-200

Exposure of Sensitive Information to an Unauthorized Actor