CVE-2025-9914

The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*

History

29 Jan 2026, 01:56

Type Values Removed Values Added
References () https://sick.com/psirt - () https://sick.com/psirt - Vendor Advisory
References () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource
References () https://www.first.org/cvss/calculator/3.1 - () https://www.first.org/cvss/calculator/3.1 - Not Applicable
References () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json - () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json - Vendor Advisory
References () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf - () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf - Vendor Advisory
References () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product
CPE cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*
First Time Sick tire Analytics
Sick
Sick logistic Diagnostic Analytics
Sick baggage Analytics
Sick package Analytics
CWE NVD-CWE-noinfo

06 Oct 2025, 07:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-10-06 07:15

Updated : 2026-01-29 01:56


NVD link : CVE-2025-9914

Mitre link : CVE-2025-9914

CVE.ORG link : CVE-2025-9914


JSON object : View

Products Affected

sick

  • tire_analytics
  • baggage_analytics
  • logistic_diagnostic_analytics
  • package_analytics
CWE
CWE-288

Authentication Bypass Using an Alternate Path or Channel

NVD-CWE-noinfo