Description (CNA)
All communication with the REST API is unencrypted (HTTP), allowing an attacker to intercept traffic between an actor and the webserver. This leads to the possibility of information gathering and downloading media files.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SICK AG / SICK Media Server | affected all versions |
CWE
CWE-319
References
- https://sick.com/psirt
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
ADP enrichment
No English description supplied.
No references supplied.