Advisories · Technology
SICK AG SICK Media Server.
Every CVE that names SICK AG SICK Media Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 3.1 Low
Poor quality of randomness in authorization tokens
- SICK AG SICK Media Server
- Weak cryptography or TLS
- CVSS 6.5 Medium
Deprecated TLS version supported
- SICK AG SICK Media Server
- Weak cryptography or TLS
- CVSS 5.3 Medium
No protection against brute-force attacks
- SICK AG SICK Media Server
- Authentication bypass
- CVSS 7.5 High
Unencrypted communication
- SICK AG SICK Media Server
- Weak cryptography or TLS
- CVSS 4.3 Medium
Clickjacking
- SICK AG SICK Field Analytics
- SICK AG SICK Media Server
- CWE-1021
- CVSS 5.3 Medium
Cookie missing HttpOnly flag
- SICK AG SICK Media Server
- CWE-1004
- CVSS 7.5 High
Unencrypted communication (HTTP)
- SICK AG SICK Media Server
- Weak cryptography or TLS
- CVSS 7.5 High
Credential disclosure
- SICK AG SICK Media Server
- CWE-540
- CVSS 8.6 High
Configurations endpoint does not require authorization
- SICK AG SICK Media Server
- Broken access control