Vulnerability in Sick Field Analytics
CVE-2025-49192
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
EPSS: 0.003 (19.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Sick Field_analytics
- Sick Media_server
- Sick Ag Field Analytics — versions all versions
- Sick Ag Media Server — versions 0
Weakness classification (CWE)
References
- psirt@sick.de (Vendor Advisory, x_SICK PSIRT Website)
- psirt@sick.de (x_SICK Operating Guidelines, Broken Link)
- psirt@sick.de (US Government Resource, x_ICS-CERT recommended practices on Industrial Security)
- psirt@sick.de (x_CVSS v3.1 Calculator, Not Applicable)
- psirt@sick.de (vendor-advisory, Vendor Advisory)
- psirt@sick.de (vendor-advisory, x_csaf, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-49192?
- CVE-2025-49192 is a medium-severity vulnerability in Sick Field Analytics, classified under Improper Restriction of Rendered UI Layers or Frames (Clickjacking). CVSS score: 4.3/10. Published 2025-06-12.
- How severe is CVE-2025-49192?
- Medium severity. CVSS v3 base score is 4.3 out of 10.