Weak Password Hashing in FTP User Accounts for SICK Products

CVE-2025-49197

What is CVE-2025-49197?

The affected SICK products utilize a vulnerable password hash function, which allows attackers to crack the weak hashes and potentially gain unauthorized access to FTP user accounts. This vulnerability poses significant security risks, enabling malicious actors to exploit weak passwords and compromise sensitive data stored on FTP servers. Organizations using SICK products should review and enhance their password policies, implement stronger hashing algorithms, and follow recommended cybersecurity practices to mitigate these risks.

References