medium4.2
CVE-2025-49193
The application fails to implement several security headers.
Impact
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Baggage Analytics | All versions |
| Sick | Field Analytics | All versions |
| Sick | Logistic Diagnostic Analytics | All versions |
| Sick | Media Server | before 1.5 |
| Sick | Package Analytics | All versions |
| Sick | Tire Analytics | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf