Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.
References
| Link | Resource |
|---|---|
| https://sick.com/psirt | Vendor Advisory |
| https://www.cisa.gov/resources-tools/resources/ics-recommended-practices | US Government Resource |
| https://www.first.org/cvss/calculator/3.1 | Not Applicable |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json | Vendor Advisory |
| https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf | Vendor Advisory |
| https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf | Product |
Configurations
Configuration 1 (hide)
|
History
27 Jan 2026, 17:29
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Sick enterprise Analytics
Sick tire Analytics Sick Sick logistic Diagnostic Analytics Sick baggage Analytics Sick package Analytics |
|
| References | () https://sick.com/psirt - Vendor Advisory | |
| References | () https://www.cisa.gov/resources-tools/resources/ics-recommended-practices - US Government Resource | |
| References | () https://www.first.org/cvss/calculator/3.1 - Not Applicable | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json - Vendor Advisory | |
| References | () https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf - Vendor Advisory | |
| References | () https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf - Product | |
| CPE | cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:* cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:* |
06 Oct 2025, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-10-06 07:15
Updated : 2026-01-27 17:29
NVD link : CVE-2025-58579
Mitre link : CVE-2025-58579
CVE.ORG link : CVE-2025-58579
JSON object : View
Products Affected
sick
- package_analytics
- logistic_diagnostic_analytics
- tire_analytics
- baggage_analytics
- enterprise_analytics
CWE
CWE-497
Exposure of Sensitive System Information to an Unauthorized Control Sphere