CVE-2025-49198 LOW

CVE-2025-49198: Poor quality of randomness in authorization tokens

Vendor Sick Ag

Product SICK Media Server

Weakness CWE-330 · Insufficient randomness

Published June 12, 2025

Last update June 17, 2025

View on NVD All CVEs

CVSS base score

3.1/10

Attack vector Network

Attack complexity High

Privileges required None

User interaction Required

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

The Media Server’s authorization tokens have a poor quality of randomness. An attacker may be able to guess the token of an active user by computing plausible tokens.

Key dates

02Disclosure timeline

June 12, 2025 CVE published

June 17, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-49198 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/330.html