CVE-2025-58589

Published: Oct 6, 2025Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.

Affected (4)

Products: Sick: Baggage Analytics, Logistic Diagnostic Analytics, Package Analytics, Tire Analytics

4 products

Baggage Analytics

Logistic Diagnostic Analytics

Package Analytics

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Sick Baggage Analytics	All versions
Sick Logistic Diagnostic Analytics	All versions
Sick Package Analytics	All versions
Sick Tire Analytics	All versions

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (6)

https://sick.com/psirt

Source: psirt@sick.de

Vendor Advisory

https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Source: psirt@sick.de

US Government Resource

https://www.first.org/cvss/calculator/3.1

Source: psirt@sick.de

Not Applicable

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json

Source: psirt@sick.de

Vendor Advisory

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf

Source: psirt@sick.de

Vendor Advisory

https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf

Source: psirt@sick.de

Product

Timeline

No history available yet.