CVE-2025-58580

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - psirt@sick.de

Published

2025-10-06

Last modified

2026-10-09

Weaknesses

CWE-117

Affected products

• Enterprise Analytics (Sick)
• Enterprise Analytics (Sick Ag)

References

• https://sick.com/psirt
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im01067…
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf