CVE-2025-58585
Unknown Unknown - Not Provided

BaseFortify

Vulnerability report for CVE-2025-58585, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2025-10-06

Last updated on: 2025-10-06

Assigner: SICK AG

Description

Multiple endpoints with sensitive information do not require authentication, making the application susceptible to information gathering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2025-10-06
Last Modified
2025-10-06
Generated
2026-07-06
AI Q&A
2025-10-06
EPSS Evaluated
2026-07-05
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
sick sick_enterprise_analytics *
sick sick_logistic_analytics *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-497 The product does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the product does.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability involves multiple endpoints in an application that expose sensitive information without requiring any authentication. This means that anyone can access these endpoints and gather sensitive data without needing to log in or prove their identity.

Impact Analysis

The vulnerability can lead to unauthorized information gathering, potentially exposing sensitive data to attackers or unauthorized users. This can result in privacy breaches, loss of confidentiality, and could be leveraged for further attacks.

Compliance Impact

This vulnerability could negatively impact compliance with standards and regulations such as GDPR and HIPAA, which require protection of sensitive information and restrict unauthorized access. Exposing sensitive data without authentication may lead to violations of these regulations.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-58585. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart