CVE-2025-58580mediumCWE-117

CVE-2025-58580: medium-severity vulnerability in SICK AG Enterprise Analytics

Injection via log file

Published

Follow this CVE+ Monitor Enterprise Analytics

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.5epss 0.4%
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected products
SICK AG · Enterprise Analytics
Related CVEs — SICK AG Enterprise Analytics

In the same product, most dangerous first.

CVE-2025-58582MEDIUMUncontrolled Resource Consumption via log fileEPSS 0.6%CVE-2025-49184HIGHInformation disclosure to unauthorized userEPSS 0.5%CVE-2025-58587MEDIUMImproper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2025-58579MEDIUMUsername Disclosure Through Missing AuthenticationEPSS 0.4%CVE-2025-58584MEDIUMPlain Text Transmission of Username and Password in the URLEPSS 0.4%CVE-2025-58586MEDIUMUser Enumeration by excessive error outputEPSS 0.4%