CVE-2025-58581CWE-200information-disclosure

CVE-2025-58581

Medium · published October 6, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
25.3
In the wild
Unconfirmed
What it is

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00333 · 25.3th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-10-06T11:15Z
Affected products (1)
ProductVersionsFixed in
sick/enterprise_analyticsall versions—
References (6)
https://sick.com/psirt · [email protected]https://www.cisa.gov/resources-tools/resources/ics-recommended-practices · [email protected]https://www.first.org/cvss/calculator/3.1 · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · [email protected]https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · [email protected]https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · [email protected]
EPSS history
Timeline
  • 06 OCT 06:50Z
    Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
    cvelistv5