Deprecated TLS Version Vulnerability in SICK Devices
CVE-2025-49196

6.5MEDIUM

Key Information:

Vendor

Sick Ag

Status
Sick Field Analytics
Vendor
CVE Published:
12 June 2025

What is CVE-2025-49196?

A vulnerability exists within SICK devices, where the implementation of a deprecated TLS version can be exploited by attackers. This flaw could allow unauthorized access to sensitive information, permit modifications to data in unintended ways, or even enable the impersonation of legitimate users or devices on the network. Consequently, this vulnerability poses significant risks to the confidentiality and integrity of the data managed by these devices, necessitating prompt action to mitigate the exposure.

Affected Version(s)

SICK Field Analytics all versions

References

https://sick.com/psirt
x_SICK PSIRT Website
https://cdn.sick.com/media/docs/1/11/411/Special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-49196 : Deprecated TLS Version Vulnerability in SICK Devices