CVE-2025-49182 PUBLISHED

Credential disclosure

Assigner: SICK AG
Reserved: 03.06.2025 Published: 12.06.2025 Updated: 16.06.2025

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.

Metrics

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS Score: 7.5

Product Status

Vendor SICK AG
Product SICK Media Server
Versions Default: unaffected
  • affected from 0 to 1.5 (excl.)

Solutions

Users are strongly recommended to upgrade to the latest release of Media Server (>= 1.5). It is also advised to change the default passwords.

References

Problem Types

  • CWE-540 Inclusion of Sensitive Information in Source Code CWE