CVE-2025-58579CWE-497

CVE-2025-58579

Medium · published October 6, 2025

CVSS v3.1

5.3

EPSS

Percentile

33.5

In the wild

Unconfirmed

What it is

Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.00404 · 33.5th percentile
Weakness: CWE-497 · Exposure of Sensitive System Information to an Unauthorized Control Sphere
Published: 2025-10-06T11:15Z

Affected products (5)

Product	Versions	Fixed in
sick/baggage_analytics	all versions	—
sick/enterprise_analytics	all versions	—
sick/logistic_diagnostic_analytics	all versions	—
sick/package_analytics	all versions	—
sick/tire_analytics	all versions	—

References (6)

https://sick.com/psirt · [email protected]https://www.cisa.gov/resources-tools/resources/ics-recommended-practices · [email protected]https://www.first.org/cvss/calculator/3.1 · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · [email protected]https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · [email protected]

EPSS history

Timeline

06 OCT 07:09Z
Username Disclosure Through Missing Authentication
cvelistv5