CVE-2025-58580

Katalog CVE

CVSS 5.3 · Medium EPSS 0,37%

Kerentanan Improper Output Neutralization for Logs pada sick enterprise analytics. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Rincian

Terbit di NVD

6 Oktober 2025

Terakhir diubah

9 Oktober 2026

Status NVD

Analyzed

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-117: Improper Output Neutralization for Logs

EPSS (30 hari)

0,37% peluang dieksploitasi; lebih tinggi dari 28,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sick.com/psirt advisory vendor
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json advisory vendor
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf advisory vendor
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices pemerintah AS
• https://www.first.org/cvss/calculator/3.1 not applicable
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_e... product