high7.5
CVE-2025-49194
The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels.
Impact
The server supports authentication methods in which credentials are sent in plaintext over unencrypted channels. If an attacker were to intercept traffic between a client and this server, the credentials would be exposed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sick | Media Server | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf