Vulnerability · Published Jun 12, 2025 · Assigned by SICK AG
CVE-2025-49184Information disclosure to unauthorized user
High 7.5
In plain English
A high-severity information exposure in Baggage Analytics from SICK AG. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 42% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)0.5%top 57.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A remote unauthorized attacker may gather sensitive information of the application, due to missing authorization of configuration settings of the product.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SICK AG | Field Analytics | all versions |
| SICK AG | Baggage Analytics | all version |
| SICK AG | Tire Analytics | all version |
| SICK AG | Package Analytics | all versions |
| SICK AG | Logistic Diagnostic Analytics | all versions |
| SICK AG | Enterprise Analytics | all versions |
Weakness: CWE-200 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
References
- https://sick.com/psirt x_SICK PSIRT Website
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF x_SICK Operating Guidelines
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices x_ICS-CERT recommended practices on Industrial Security
- https://www.first.org/cvss/calculator/3.1 x_CVSS v3.1 Calculator
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisory, x_csaf