CVE-2025-49182 | THREATINT

Description

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.

Reserved 2025-06-03 | Published 2025-06-12 | Updated 2025-06-13 | Assigner SICK AG

HIGH: 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Problem types

CWE-540 Inclusion of Sensitive Information in Source Code

Product status

Default status

unaffected

Any version before 1.5

affected

References

sick.com/psirt

cdn.sick.com/...ation_CYBERSECURITY_BY_SICK_en_IM0084411.PDF

www.cisa.gov/...es-tools/resources/ics-recommended-practices

www.first.org/cvss/calculator/3.1

www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisory

www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisory

cve.org (CVE-2025-49182)

nvd.nist.gov (CVE-2025-49182)

Download JSON