CVE-2025-49192: Clickjacking

Published Jun 12, 2025

Updated

The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.

Affected Software

2 affected components

SICK Field Analytics

SICK Media Server<1.5

Remediation

Information

Media Server: Users are strongly recommended to upgrade to the latest release of Media Server (>= 1.5).

Event History

Jun 12, 2025

CVE Published

via MITRE·02:12 PM

Data Sourced

via MITRE·02:12 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-49192?

The severity of CVE-2025-49192 is medium with a score of 6.1.

How do I fix CVE-2025-49192?

To remediate CVE-2025-49192, it is recommended to upgrade to the latest release of Media Server, version 1.5 or higher.

What type of attack is associated with CVE-2025-49192?

CVE-2025-49192 is associated with clickjacking attacks, where a user can be tricked into clicking on unintended elements.

Which software is affected by CVE-2025-49192?

CVE-2025-49192 affects SICK Field Analytics and SICK Media Server.

What could an attacker achieve by exploiting CVE-2025-49192?

Exploiting CVE-2025-49192 could allow an attacker to reveal confidential information or potentially take control of a user's actions.