Description
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SICK | Field Analytics | all versions | — |
| SICK | Media Server | < 1.5 | 1.5 |
| SICK | Baggage Analytics | < 4.6.3 | 4.6.3 |
| SICK | Tire Analytics | < 4.6.3 | 4.6.3 |
| SICK | Package Analytics | < 4.6.3 | 4.6.3 |
| SICK | Logistic Diagnostic Analytics | < 4.6.3 | 4.6.3 |
Advisories 2
- SCA-2025-0010 Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products SICK PSIRT · May 13, 2026
- SCA-2025-0007 Multiple vulnerabilities in SICK Field Analytics and SICK Media Server SICK PSIRT · Jun 12, 2025
References
- https://sick.com/psirt
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf vendor-advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json vendor-advisory