CVE-2025-58590
Full vulnerability record from the local CVENow database.
Description
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Analyzed
Source identifier
Published
2025-10-06 07:15:35.873000
Last modified
2026-10-18 21:10:00.120000
View original CVE JSON
{
"id": "CVE-2025-58590",
"sourceIdentifier": "[email protected]",
"published": "2025-10-06T07:15:35.873",
"lastModified": "2026-10-18T21:10:00.120",
"vulnStatus": "Analyzed",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information."
},
{
"lang": "es",
"value": "Es posible forzar por fuerza bruta carpetas y archivos, lo que puede ser utilizado por un atacante para robar información sensible."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "SICK AG",
"product": "Baggage Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "<= 4.6.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Tire Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "<= 4.6.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Package Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "<= 4.6.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Logistic Diagnostic Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "0",
"lessThanOrEqual": "<= 4.6.1",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Baggage Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Tire Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Package Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Logistic Diagnostic Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Baggage Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Tire Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Package Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
},
{
"vendor": "SICK AG",
"product": "Logistic Diagnostic Analytics",
"defaultStatus": "affected",
"versions": [
{
"version": "4.6.2",
"versionType": "custom",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 2.8,
"impactScore": 3.6
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-10-06T17:41:38.972497Z",
"id": "CVE-2025-58590",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-22"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.6.1",
"matchCriteriaId": "DC690872-9AF3-4159-8AFA-DD78816446A9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.6.1",
"matchCriteriaId": "40EE515D-E8FD-490E-B0FF-9AABEC8488DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.6.1",
"matchCriteriaId": "A831A6C9-62EB-4E92-A300-1C37FA04E6C0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*",
"versionEndIncluding": "4.6.1",
"matchCriteriaId": "6BE16CA1-C2F5-44D5-974D-F98AD173DC61"
}
]
}
]
}
],
"references": [
{
"url": "https://sick.com/psirt",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices",
"source": "[email protected]",
"tags": [
"US Government Resource"
]
},
{
"url": "https://www.first.org/cvss/calculator/3.1",
"source": "[email protected]",
"tags": [
"Not Applicable"
]
},
{
"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf",
"source": "[email protected]",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf",
"source": "[email protected]",
"tags": [
"Product"
]
}
]
}