← Back

CVE-2025-58580

nvd nist
Published: Oct 6, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Affected (1)

Sick
1 product
Enterprise Analytics
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Enterprise Analytics
All versions

Related CWEs

CWE-117
Improper Output Neutralization for Logs
The product does not neutralize or incorrectly neutralizes output that is written to logs.

References (6)

Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
US Government Resource
Source: psirt@sick.de
Not Applicable
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Product

Timeline

No history available yet.