What’s Vulnerable › Vulnerabilities

CVE-2025-9914

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-06 · updated 2026-10-18
• Weakness: CWE-288

Description

The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.

Affected products

• SICK AG Baggage Analytics: all versions
• SICK AG Logistic Diagnostic Analytics: all versions
• SICK AG Package Analytics: all versions
• SICK AG Tire Analytics: all versions

References

• https://sick.com/psirt
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf

Get alerted when CVE-2025-9914 or the next vulnerability affects your stack