Vulnerability Details CVE-2025-58579
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 28.8%
CVSS Severity
CVSS v3 Score 5.3
References
- https://sick.com/psirt
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
Products affected by CVE-2025-58579
-
cpe:2.3:a:sick:baggage_analytics:*
-
cpe:2.3:a:sick:enterprise_analytics:*
-
cpe:2.3:a:sick:logistic_diagnostic_analytics:*
-
cpe:2.3:a:sick:package_analytics:04.0.0
-
cpe:2.3:a:sick:package_analytics:04.1.1
-
cpe:2.3:a:sick:tire_analytics:*