← All advisories

Medium severity5.3NVD Advisory· Published Jun 12, 2025· Updated Jun 17, 2026

CVE-2025-49188

CVE-2025-49188

Description

The application sends user credentials as URL parameters instead of POST bodies, making it vulnerable to information gathering.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

SICK AG/Field Analytics2 versions
cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sick:field_analytics:*:*:*:*:*:*:*:*
- (no CPE)range: all versions

Patches

Vulnerability mechanics

References

6

sick.com/psirtnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.jsonnvdVendor Advisory
www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdfnvdVendor Advisory
cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDFnvdBroken Link
www.cisa.gov/resources-tools/resources/ics-recommended-practicesnvdUS Government Resource
www.first.org/cvss/calculator/3.1nvdNot Applicable

News mentions

0

No linked articles in our index yet.