← Back

CVE-2025-49182

nvd nist
Published: Jun 12, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.

Affected (1)

Products: Sick: Media Server
Sick
1 product
Media Server
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Media Server
Before 1.5

Related CWEs

CWE-540
Inclusion of Sensitive Information in Source Code
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.

References (6)

Source: psirt@sick.de
Broken Link
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
US Government Resource
Source: psirt@sick.de
Not Applicable
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Vendor Advisory

Timeline

No history available yet.