CVE-2025-49182: Credential disclosure
Published Jun 12, 2025
·Updated
Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Affected Software
1 affected component
SICK Media Server<1.5
Remediation
Information
Users are strongly recommended to upgrade to the latest release of Media Server (>= 1.5). It is also advised to change the default passwords.
Event History
Jun 12, 2025
CVE Published
via MITRE·01:15 PM
Data Sourced
via MITRE·01:15 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-49182?
CVE-2025-49182 has a severity rating of critical with a score of 9.8.
2
How do I fix CVE-2025-49182?
To fix CVE-2025-49182, users should upgrade to the latest release of the SICK Media Server (version 1.5 or higher) and change any default passwords.
3
What type of vulnerability is CVE-2025-49182?
CVE-2025-49182 is a credential disclosure vulnerability due to exposed login credentials in the source code.
4
What risks does CVE-2025-49182 pose?
CVE-2025-49182 allows an attacker to gain full access to the application by using disclosed admin user credentials.
5
When was CVE-2025-49182 published?
CVE-2025-49182 was published on June 12, 2025.