CVE-2025-58585mediumCWE-497

CVE-2025-58585: falha de média gravidade em SICK AG Baggage Analytics

Sensitive Information Disclosure Through Missing Authentication

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Package Analytics+ Monitorar Baggage Analytics

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.3epss 0.4%
Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
SICK AG · Baggage AnalyticsSICK AG · Logistic Diagnostic AnalyticsSICK AG · Package AnalyticsSICK AG · Tire Analytics
CVEs relacionadas — SICK AG Baggage Analytics

No mesmo produto, das mais perigosas para as menos.

CVE-2025-58591MEDIUMPath TraversalEPSS 0.5%CVE-2025-58590MEDIUMPath traversalEPSS 0.5%CVE-2025-49184HIGHInformation disclosure to unauthorized userEPSS 0.5%CVE-2025-58587MEDIUMImproper Restriction of Excessive Authentication AttemptsEPSS 0.5%CVE-2025-58579MEDIUMUsername Disclosure Through Missing AuthenticationEPSS 0.4%CVE-2025-58584MEDIUMPlain Text Transmission of Username and Password in the URLEPSS 0.4%