4.3Orta
CVE-2025-58581Information Disclosure Through Stacktrace-/MQTT/Config/changeAll
Açıklama
When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application.
Zayıflık türü (CWE):
CWE-200
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| SICK AG | Enterprise Analytics | all versions |
Kaynaklar ve yamalar
- https://sick.com/psirt Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_… Product
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf vendor-advisoryVendor Advisory
CPE eşleşmeleri (NVD) (1)
cpe:2.3:a:sick:enterprise_analytics:*:*:*:*:*:*:*:*