6.5Orta
CVE-2025-58580Injection via log file
Açıklama
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.
Zayıflık türü (CWE):
CWE-117
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| SICK AG | Enterprise Analytics | all versions |
Kaynaklar ve yamalar
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:*