CVE-2025-58579
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-10-06

Last updated on: 2025-10-06

Assigner: SICK AG

Description
Due to a lack of authentication, it is possible for an unauthenticated user to request data from this endpoint, making the application vulnerable for user enumeration.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-10-06
Last Modified
2025-10-06
Generated
2026-06-16
AI Q&A
2025-10-06
EPSS Evaluated
2026-06-15
NVD
CVE-2025-58579
EUVD
EUVD-2025-32192
Affected Vendors & Products
Showing 2 associated CPEs
Vendor Product Version / Range
sick sick_enterprise_analytics *
sick sick_logistic_analytics *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability occurs because there is no authentication required to access a specific endpoint, allowing an unauthenticated user to request data from it. This makes the application susceptible to user enumeration, where an attacker can determine valid users by analyzing the responses from the endpoint.

Impact Analysis

The vulnerability can allow attackers to enumerate users without authentication, potentially exposing user information. This can lead to privacy concerns and may be used as a stepping stone for further attacks such as targeted phishing or brute force attacks.

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-58579. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart