PT-2025-25312 · Sick Ag+1 · Sick Field Analytics+1

Published 2025-06-12 · Updated 2026-01-29 · CVE-2025-49187

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue allows an attacker to guess usernames by exploiting different error messages returned for incorrect passwords versus non-existing usernames during failed login attempts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2025-49187

Affected Products

Sick Field Analytics

Field Analytics

References · 10

• https://sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf · Vendor Advisory
• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0007.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49187 · Security Note
• https://twitter.com/CVEnew/status/1933161752759308385 · Twitter Post
• https://t.me/cveNotify/150290 · Telegram Post
• https://first.org/cvss/calculator/3.1 · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://t.me/cvetracker/26087 · Telegram Post
• https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF · Note