by Kastro
Paper/Archive/CVE-2025-49199

CVE-2025-49199

SICK AG SICK Field Analytics — Backup files can be modified and uploaded

EPSS 0.3%CVSS 9.8
critical.is priorityof 100
35
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 25.9.259 × 205.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable. They can redirect traffic that is meant to be internal to their own hosted services and gathering information.

Affected

ProductAffectedFixed inSource
SICK Field Analyticsall versions–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
SICK AG (CNA)8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsick.com/psirtrefcdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDFrefcisa.gov/resources-tools/resources/ics-recommended-practicesreffirst.org/cvss/calculator/3.1advisorysick.com/.well-known/csaf/white/2025/sca-2025-0007.pdfadvisorysick.com/.well-known/csaf/white/2025/sca-2025-0007.json