CVE-2025-49196 MEDIUM

CVE-2025-49196: Deprecated TLS version supported

Vendor Sick Ag
Product SICK Field Analytics
Weakness CWE-327 · Broken crypto
Published June 12, 2025
Last update June 17, 2025

CVSS base score

6.5/10
Attack vector Network
Attack complexity High
Privileges required None
User interaction None
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:N

What the vulnerability does

01Description

A service supports the use of a deprecated and unsafe TLS version. This could be exploited to expose sensitive information, modify data in unexpected ways or spoof identities of other users or devices, affecting the confidentiality and integrity of the device.

Key dates

02Disclosure timeline

June 12, 2025 CVE published
June 17, 2025 Record updated