CVE-2025-49193

MEDIUM

SICK Baggage Analytics < 4.6.3 - Protection Mechanism Failure via Missing Security Headers

Title source: llm
STIX 2.1

Description

The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).

References (6)

Core 6
Core References
Vendor Advisory x_sick psirt website
https://sick.com/psirt
US Government Resource x_ics-cert recommended practices on industrial security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
Not Applicable x_cvss v3.1 calculator
https://www.first.org/cvss/calculator/3.1

Scores

CVSS v3 4.2
EPSS 0.0026
EPSS Percentile 17.4%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-693
Status published
Products (12)
sick/baggage_analytics
sick/field_analytics
sick/logistic_diagnostic_analytics
sick/media_server < 1.5
sick/package_analytics
sick/tire_analytics
SICK AG/Baggage Analytics < 4.6.3
SICK AG/Field Analytics all versions
SICK AG/Logistic Diagnostic Analytics < 4.6.3
SICK AG/Media Server < 1.5
... and 2 more
Published Jun 12, 2025
Tracked Since Feb 18, 2026