CVE-2025-49196

MEDIUM

Sick Field Analytics - Broken Cryptographic Algorithm

Title source: rule

Description

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.

References (6)

[Vendor Advisory] https://sick.com/psirt

[Broken Link] https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF

[US Government Resource] https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

[Not Applicable] https://www.first.org/cvss/calculator/3.1

[Vendor Advisory] https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf

[Vendor Advisory] https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json

Scores

CVSS v3 6.5

EPSS 0.0016

EPSS Percentile 36.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-327

Status published

Products (1)

sick/field_analytics

Published Jun 12, 2025

Tracked Since Feb 18, 2026