CVE-2025-58587

Improper Restriction of Excessive Authentication Attempts

CVSS 6.5 MEDIUMEPSS 0.5%CWE-307

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Produtos afetados

SICK AG · Baggage Analytics SICK AG · Enterprise Analytics SICK AG · Logistic Diagnostic Analytics SICK AG · Package Analytics SICK AG · Tire Analytics

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf