CVE-2025-58581mediumCWE-200

CVE-2025-58581: fallo de gravedad media en SICK AG Enterprise Analytics

Information Disclosure Through Stacktrace-/MQTT/Config/changeAll

Publicada el

Seguir esta CVE+ Monitorear Enterprise Analytics

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.3epss 0.3%
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Productos afectados
SICK AG · Enterprise Analytics
CVEs relacionadas — SICK AG Enterprise Analytics

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-58582MEDIUMUncontrolled Resource Consumption via log fileEPSS 0.6%CVE-2025-49184HIGHInformation disclosure to unauthorized userEPSS 0.5%CVE-2025-58587MEDIUMImproper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2025-58579MEDIUMUsername Disclosure Through Missing AuthenticationEPSS 0.4%CVE-2025-58584MEDIUMPlain Text Transmission of Username and Password in the URLEPSS 0.4%CVE-2025-58580MEDIUMInjection via log fileEPSS 0.4%