CVE-2025-9914 Details
Description
The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.
An authentication bypass vulnerability has been identified in SICK Enterprise Analytics and SICK Logistic Analytics products. This vulnerability allows attackers to log in using credentials stored in the system's local database, potentially leading to unauthorized access. Such access could compromise the application's confidentiality.
Users are advised to ensure that only trusted entities have access to the device. Additionally, SICK recommends following general security practices to operate the product in a protected IT environment. Resources such as the 'SICK Operating Guidelines' and 'ICS-CERT recommended practices on Industrial Security' can assist in implementing these security measures.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 6, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
| CWE-288 | Authentication Bypass Using an Alternate Path or Channel | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| sick baggage analytics | All versions |
CPE
Remediation
| |
| sick logistic diagnostic analytics | All versions |
CPE
Remediation
| |
| sick package analytics | All versions |
CPE
Remediation
| |
| sick tire analytics | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Jan 29, 2026 | Initial Analysis | [email protected] |
| Oct 6, 2025 | New CVE Received | [email protected] |