Description
The application fails to implement several security headers. These headers help increase the overall security level of the web application by e.g., preventing the application to be displayed in an iFrame (Clickjacking attacks) or not executing injected malicious JavaScript code (XSS attacks).
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG Field Analytics
Default version status: affected
all versionsaffected
SICK AG Media Server
Default version status: unaffected
0 to < 1.5affected
SICK AG Baggage Analytics
Default version status: affected
0 to < 4.6.3affected
SICK AG Tire Analytics
Default version status: affected
0 to < 4.6.3affected
SICK AG Package Analytics
Default version status: affected
0 to < 4.6.3affected
SICK AG Logistic Diagnostic Analytics
Default version status: affected
0 to < 4.6.3affected
References
- https://sick.com/psirt ↗
- https://cdn.sick.com/media/docs/1/11/411/Special_information_CYBERSECURITY_BY_SICK_en_IM0084411.PDF ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.pdf ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0007.json ↗