CVE-2025-9914CWE-288

CVE-2025-9914

Medium · published October 6, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
24.0
In the wild
Unconfirmed
What it is

The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00322 · 24.0th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2025-10-06T11:15Z
Affected products (4)
ProductVersionsFixed in
sick/baggage_analyticsall versions—
sick/logistic_diagnostic_analyticsall versions—
sick/package_analyticsall versions—
sick/tire_analyticsall versions—
References (6)
https://sick.com/psirt · [email protected]https://www.cisa.gov/resources-tools/resources/ics-recommended-practices · [email protected]https://www.first.org/cvss/calculator/3.1 · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · [email protected]https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · [email protected]
EPSS history
Timeline
  • 06 OCT 06:45Z
    The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access
    cvelistv5