Files in the source code contain login credentials for the admin user and the property configuration password, allowing an attacker to get full access to the application.
Weakness
Source code on a web server or repository often contains sensitive information and should generally not be accessible to users.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Media_server | Sick | * | 1.5 (excluding) |
Potential Mitigations
References
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf