6.5Mittel
CVE-2025-58590Path traversal
Beschreibung
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
Schwachstellentyp (CWE):
CWE-22
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| SICK AG | Baggage Analytics | ≤ <= 4.6.1 | |
| SICK AG | Logistic Diagnostic Analytics | ≤ <= 4.6.1 | |
| SICK AG | Package Analytics | ≤ <= 4.6.1 | |
| SICK AG | Tire Analytics | ≤ <= 4.6.1 |
Referenzen und Patches
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
CPE-Treffer (NVD) (4)
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*≤ 4.6.1