PT-2025-25319 · Sick Ag+1 · Baggage Analytics+7

Published 2025-06-12 · Updated 2025-06-12 · CVE-2025-49193

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The application fails to implement several security headers, which are crucial for increasing the overall security level of the web application. These headers help prevent Clickjacking attacks by not allowing the application to be displayed in an iFrame and prevent the execution of injected malicious JavaScript code, thereby mitigating XSS attacks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2025-49193

Affected Products

Baggage Analytics

Field Analytics

Logistic Diagnostic Analytics

Mediaserver

Package Analytics

Sick Field Analytics

Sick Media Server

Tire Analytics

References · 10

• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-49193 · Security Note
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0007.json · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-49193 · Vendor Advisory
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cvetracker/26094 · Telegram Post
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://twitter.com/CVEnew/status/1933172588424880138 · Twitter Post
• https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF · Note