CVE-2025-49199: Backup files can be modified and uploaded

Published Jun 12, 2025

Updated

The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable. They can redirect traffic that is meant to be internal to their own hosted services and gathering information.

Affected Software

1 affected component

SICK Field Analytics

Event History

Jun 12, 2025

CVE Published

via MITRE·02:26 PM

Data Sourced

via MITRE·02:26 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·03:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-49199?

CVE-2025-49199 has a critical severity rating of 9.8.

What type of vulnerability is CVE-2025-49199?

CVE-2025-49199 is a vulnerability that allows backup files to be modified and re-uploaded.

How does CVE-2025-49199 affect the application?

CVE-2025-49199 can disrupt the application by allowing an attacker to misconfigure services, rendering the application unusable.

How can I mitigate CVE-2025-49199?

To mitigate CVE-2025-49199, ensure that backup ZIP files are properly signed and protected against unauthorized modifications.

What software is impacted by CVE-2025-49199?

CVE-2025-49199 affects the SICK Field Analytics software.