9.8
CVE-2025-49182
- EPSS 0.1%
- Veröffentlicht 12.06.2025 13:15:02
- Zuletzt bearbeitet 29.01.2026 17:59:50
- Quelle psirt@sick.de
- CVE-Watchlists
- Unerledigt
LoginFiles in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sick ≫ Media Server Version < 1.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.1% | 0.283 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| psirt@sick.de | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
CWE-540 Inclusion of Sensitive Information in Source Code
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.