by Kastro
Paper/Archive/CVE-2025-49196

CVE-2025-49196

SICK AG SICK Field Analytics — Deprecated TLS version supported

EPSS 0.3%CVSS 9.1
critical.is priorityof 100
31
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 17.6.176 × 203.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.

Affected

ProductAffectedFixed inSource
SICK Field Analyticsall versions–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
SICK AG (CNA)6.5CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsick.com/psirtrefcdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDFrefcisa.gov/resources-tools/resources/ics-recommended-practicesreffirst.org/cvss/calculator/3.1advisorysick.com/.well-known/csaf/white/2025/sca-2025-0007.pdfadvisorysick.com/.well-known/csaf/white/2025/sca-2025-0007.json