PT-2025-40860 · Sick Ag+1 · Enterprise Analytics+1

Published 2025-10-06 · Updated 2025-10-06 · CVE-2025-58580

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Affected versions not specified

Description An API endpoint allows the creation of arbitrary log entries via a POST request. Insufficient validation of input data enables an attacker to create manipulated log entries, potentially falsifying or diluting logs. The affected API endpoint is vulnerable to unauthenticated log entry manipulation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-117

Related Identifiers

CVE-2025-58580

Affected Products

Enterprise Analytics

Sick

References · 10

• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-58580 · Security Note
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · Vendor Advisory
• https://t.me/cveNotify/137463 · Telegram Post
• https://first.org/cvss/calculator/3.1 · Note
• https://twitter.com/VulmonFeeds/status/1975135322435420516 · Twitter Post
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://twitter.com/CVEnew/status/1975097889664774493 · Twitter Post