GCVE - cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Sick (`7f3a0778-9cb3-5791-a25c-ef23979e3fe0`)
Product	Tire Analytics (`75be87b4-761a-5938-b869-a03bb5736e4b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-9914`	vulnerable	2026-06-08 07:47:10.270303	Details available MEDIUM (4.3) The credentials of the users stored in the system's local database can be used for the log in, making it possible for an attacker to gain unauthorized access. This could potentially affect the confidentiality of the application. Published: 2025-10-06T06:45:59.874Z Updated: 2026-05-13T11:48:19.759Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-9913`	vulnerable	2026-06-08 07:47:10.269287	Cross Site Scripting: Session Hijacking MEDIUM (4.5) JavaScript can be ran inside the address bar via the dashboard "Open in new Tab" Button, making the application vulnerable to session hijacking. Published: 2025-10-06T06:40:49.940Z Updated: 2026-05-13T11:49:22.706Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58591`	vulnerable	2026-06-08 07:35:18.848609	Path Traversal MEDIUM (6.5) A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information. Published: 2025-10-06T07:07:30.103Z Updated: 2026-05-13T11:53:53.954Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58590`	vulnerable	2026-06-08 07:35:18.847970	Path traversal MEDIUM (6.5) It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information. Published: 2025-10-06T07:06:26.315Z Updated: 2025-10-06T17:42:15.992Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58589`	vulnerable	2026-06-08 07:35:18.847006	Information Disclosure Through Stacktrace LOW (2.7) When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application. Published: 2025-10-06T07:03:41.488Z Updated: 2026-05-13T11:52:23.944Z Open on db.gcve.eu Reference links https://sick.com/psirt https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58587`	vulnerable	2026-06-08 07:35:18.840956	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58586`	vulnerable	2026-06-08 07:35:18.839625	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58585`	vulnerable	2026-06-08 07:35:18.838662	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58584`	vulnerable	2026-06-08 07:35:18.837777	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-58579`	vulnerable	2026-06-08 07:35:18.834574	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49193`	vulnerable	2026-06-08 07:29:12.717824	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49186`	vulnerable	2026-06-08 07:29:12.700291	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2025-49184`	vulnerable	2026-06-08 07:29:12.692545	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.