CVE-2025-49182

Description

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.

PUBLISHED Reserved 2025-06-03 | Published 2025-06-12 | Updated 2025-06-16 | Assigner SICK AG

Problem types

CWE-540 Inclusion of Sensitive Information in Source Code

Product status

References

sick.com/psirt

cdn.sick.com/...ation_CYBERSECURITY_BY_SICK_en_IM0084411.PDF

www.cisa.gov/...es-tools/resources/ics-recommended-practices

www.first.org/cvss/calculator/3.1

www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisory

www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisory

cve.org (CVE-2025-49182)

nvd.nist.gov (CVE-2025-49182)

Download JSON