CVE-2025-49181 is a critical authorization bypass vulnerability affecting sick media_server, allowing unauthorized users to gather sensitive information via HTTP GET requests. Attackers can also modify log file paths and service TCP ports through HTTP POST requests, leading to a Denial of Service. With a CVSS score of 8.6 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity and no user interaction required, impacting confidentiality, integrity, and availability. While there is no known active exploitation, exploit code, or public discussion, its high FAUCET Risk Score of 86/100 indicates significant potential danger.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
Range not provided by sourceCPE matchmatch criteria | cpe:2.3:a:sick:media_server:-:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.