Product by SICK
SICK Media Server
11 known vulnerabilities in SICK Media Server (SICK), 0 of them actively exploited (CISA KEV).
Key figures
11
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
2
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-49182 | Credential disclosure | 7.5 | |
| High | CVE-2025-49181 | Configurations endpoint does not require authorization | 8.6 | |
| High | CVE-2025-49194 | Unencrypted communication | 7.5 | |
| Critical | CVE-2025-49195 | No protection against brute-force attacks | 5.3 | |
| High | CVE-2025-49183 | Unencrypted communication (HTTP) | 7.5 | |
| High | CVE-2025-49197 | Deprecated TLS version supported | 6.5 | |
| Medium | CVE-2025-49186 | No brute-force protection | 5.3 | |
| Medium | CVE-2025-49189 | Cookie missing HttpOnly flag | 5.3 | |
| Medium | CVE-2025-49192 | Clickjacking | 4.3 | |
| Medium | CVE-2025-49193 | Missing HTTP Security Headers | 4.2 | |
| High | CVE-2025-49198 | Poor quality of randomness in authorization tokens | 3.1 |