Skip to content
OpenAdvisories

Product · SICK

SICK Media Server

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-49197

    Deprecated TLS version supported

    The application uses a weak password hash function, allowing an attacker to crack the weak password hash to gain access to an FTP user account.

    SICK SICK Media Server
  • Medium 5.3
    CVE-2025-49195

    No protection against brute-force attacks

    The FTP server’s login mechanism does not restrict authentication attempts, allowing an attacker to brute-force user passwords and potentially compromising the FTP server.

    SICK SICK Media Server
  • Medium 4.3
    CVE-2025-49192

    Clickjacking

    The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential informat…

    SICK SICK Media Server SICK Field Analytics
  • Medium 5.3
    CVE-2025-49189

    Cookie missing HttpOnly flag

    The HttpOnlyflag of the session cookie \"@@\" is set to false. Since this flag helps preventing access to cookies via client-side scripts, setting the flag to false can lead to a higher possibility of Cross-Side-Scripting attacks which target the stored cooki…

    SICK SICK Media Server