Sensitive Data Exposure in SICK Products through URL Credential Transmission

CVE-2025-49188

What is CVE-2025-49188?

This vulnerability occurs when SICK's applications transmit user credentials via URL parameters instead of the more secure POST method. This practice exposes sensitive information, such as usernames and passwords, to interception by malicious actors during data transmission. Organizations using affected versions of SICK Industrial Applications are advised to implement immediate countermeasures to secure their data and follow best practices for information security management.

References