CVE-2025-49192 Clickjacking
Attackers can embed the application in a frame to trick users into unintended actions, potentially leading to account takeover or information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2025-49192?
CVE-2025-49192 is a medium-severity vulnerability in SICK Field Analytics, published on 12 Jun 2025. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
The web application is vulnerable to clickjacking attacks. The site can be embedded into another frame, allowing an attacker to trick a user into clicking on something different from what the user perceives. This could potentially reveal confidential information or allow others to take control of their computer while clicking on seemingly innocuous objects.
Weakness: CWE-1021
Which versions are affected by CVE-2025-49192?
It affects 2 products.
Products include Sick Field Analytics, Sick Media Server.
How do I fix CVE-2025-49192?
No fix has been published for CVE-2025-49192 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-49192 being exploited?
There is no known exploitation of CVE-2025-49192 in the wild and no public exploit code.
Other vulnerabilities in SICK Field Analytics
Sources
Also known as GHSA-h3v4-38wv-mgjx.