Vulnerability in Sick Field Analytics
CVE-2025-49196
A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.
Vulnerability class: POODLE (CVE-2014-3566)
EPSS: 0.002 (12.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N.
Affected products
- Sick Field_analytics
- Sick Ag Field Analytics — versions all versions
Weakness classification (CWE)
References
- psirt@sick.de (Vendor Advisory, x_SICK PSIRT Website)
- psirt@sick.de (x_SICK Operating Guidelines, Broken Link)
- psirt@sick.de (US Government Resource, x_ICS-CERT recommended practices on Industrial Security)
- psirt@sick.de (x_CVSS v3.1 Calculator, Not Applicable)
- psirt@sick.de (vendor-advisory, Vendor Advisory)
- psirt@sick.de (vendor-advisory, x_csaf, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-49196?
- CVE-2025-49196 is a medium-severity vulnerability in Sick Field Analytics, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 6.5/10. Published 2025-06-12.
- How severe is CVE-2025-49196?
- Medium severity. CVSS v3 base score is 6.5 out of 10.