Description
The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SICK | Baggage Analytics | < 4.6.3 | 4.6.3 |
| SICK | Tire Analytics | < 4.6.3 | 4.6.3 |
| SICK | Package Analytics | < 4.6.3 | 4.6.3 |
| SICK | Logistic Diagnostic Analytics | < 4.6.3 | 4.6.3 |
Advisories 1
- SCA-2025-0010 Multiple vulnerabilities in SICK Enterprise Analytics and SICK Logistic Analytics Products SICK PSIRT · May 13, 2026
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisory