CVE-2025-58579
Unknown Unknown - Not Provided

BaseFortify

Publication date: 2025-10-06

Last updated on: 2025-10-06

Assigner: SICK AG

Description
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-06
Last Modified
2025-10-06
Generated
2026-07-06
AI Q&A
2025-10-06
EPSS Evaluated
2026-07-05
NVD
CVE-2025-58579
EUVD
EUVD-2025-32192

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sick sick_enterprise_analytics *
sick sick_logistic_analytics *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability occurs because there is no authentication required to access a specific endpoint, allowing an unauthenticated user to request data from it. This makes the application susceptible to user enumeration, where an attacker can determine valid users by analyzing the responses from the endpoint.

Impact Analysis

The vulnerability can allow attackers to enumerate users without authentication, potentially exposing user information. This can lead to privacy concerns and may be used as a stepping stone for further attacks such as targeted phishing or brute force attacks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-58579. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart