PT-2025-40860 · Sick Ag+1 · Enterprise Analytics+1

Publicado 2025-10-06 · Atualizado 2025-10-06 · CVE-2025-58580

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Affected versions not specified

Description An API endpoint allows the creation of arbitrary log entries via a POST request. Insufficient validation of input data enables an attacker to create manipulated log entries, potentially falsifying or diluting logs. The affected API endpoint is vulnerable to unauthenticated log entry manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-117

Identificadores relacionados

CVE-2025-58580

Produtos afetados

Enterprise Analytics

Sick

Referências · 10

• https://sick.com/psirt · Aviso do Fabricante
• https://t.me/cveNotify/137463 · Publicação no Telegram
• https://first.org/cvss/calculator/3.1 · Nota
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · Aviso do Fabricante
• https://twitter.com/VulmonFeeds/status/1975135322435420516 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2025-58580 · Nota de Segurança
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Nota
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · Aviso do Fabricante
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Nota
• https://twitter.com/CVEnew/status/1975097889664774493 · Publicação no Twitter