This vulnerability (CVE-2025-9914) in SICK AG Baggage Analytics involves an authentication bypass due to the use of locally stored user credentials. An attacker with some level of access could leverage these credentials to bypass authentication controls and gain unauthorized access to the application. The vulnerability is classified under CWE-288 (Authentication Bypass Using an Alternate Path or Channel). The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, and impacting confidentiality only.

An attacker exploiting this vulnerability could gain unauthorized access to the Baggage Analytics application, potentially exposing confidential information stored or processed by the system. There is no indication of impact on data integrity or system availability. The medium severity rating reflects the limited scope of impact focused on confidentiality.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor SICK AG communications for updates. Until a fix is available, restrict access to the local database and ensure that credentials are protected with strong controls to reduce the risk of exploitation.