CVE-2025-49199
High
Description
The backup ZIPs are not signed by the application, leading to the possibility that an attacker can download a backup ZIP, modify and re-upload it. This allows the attacker to disrupt the application by configuring the services in a way that they are unable to run, making the application unusable. They can redirect traffic that is meant to be internal to their own hosted services and gathering information.
SeverityHigh
CVSS8.8
Exploit probability—
ProductSick Field Analytics
PublishedJun 12, 2025
First seenJun 12, 2025
Weakness typeCWE-345CWE-345
How to fix
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sick field_analytics | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.