6.5Media
CVE-2025-58590Path traversal
Descripción
It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.
Debilidad (CWE):
CWE-22
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| SICK AG | Baggage Analytics | ≤ <= 4.6.1 | |
| SICK AG | Logistic Diagnostic Analytics | ≤ <= 4.6.1 | |
| SICK AG | Package Analytics | ≤ <= 4.6.1 | |
| SICK AG | Tire Analytics | ≤ <= 4.6.1 |
Referencias y parches
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
Coincidencias CPE (NVD) (4)
cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*≤ 4.6.1cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*≤ 4.6.1