- Description
- Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive information. An attacker could also send HTTP POST requests to modify the log files’ root path as well as the TCP ports the service is running on, leading to a Denial of Service attack.
- Source
- psirt@sick.de
- NVD status
- Awaiting Analysis
CVSS 3.1
- Type
- Secondary
- Base score
- 8.6
- Impact score
- 4.7
- Exploitability score
- 3.9
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
- Severity
- HIGH
- psirt@sick.de
- CWE-862
- Hype score
- Not currently trending
CVE-2025-49181 (CVSS:8.6, HIGH) is Awaiting Analysis. Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive infor..https://t.co/u1H0pVNduJ #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
@cracbot
17 Jun 2025
6 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
CVE-2025-49181 Due to missing authorization of an API endpoint, unauthorized users can send HTTP GET requests to gather sensitive information. An attacker could also send HTTP POST … https://t.co/2jM5wqOjvS
@CVEnew
12 Jun 2025
312 Impressions
0 Retweets
1 Like
0 Bookmarks
0 Replies
0 Quotes
[CVE-2025-49181: HIGH] Missing API authorization allows unauthorized access to sensitive data, risking attacks through HTTP GET requests. Manipulating log paths and TCP ports can lead to Denial of Service. #...#cve,CVE-2025-49181,#cybersecurity https://t.co/f88n8TSccI https://t.c
@CveFindCom
12 Jun 2025
84 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes