PT-2025-40862 · Sick Ag+1 · Enterprise Analytics+1

Published 2025-10-06 · Updated 2026-01-27 · CVE-2025-58582

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Affected versions not specified

Description The system logs data from POST requests without validation. Specifically, when a user attempts to log in with incorrect credentials, the request data is logged. It is possible to send excessively large payloads in these requests, potentially impacting the system. The affected API endpoint is a login endpoint receiving POST requests. The vulnerable parameters include the data sent within the POST request, such as username and password.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Allocation of Resources Without Limits

Weakness Enumeration

CWE-770

Related Identifiers

CVE-2025-58582

Affected Products

Enterprise Analytics

Sick

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-58582 · Security Note
• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0010.json · Vendor Advisory
• https://first.org/cvss/calculator/3.1 · Note
• https://twitter.com/CVEnew/status/1975097887894769850 · Twitter Post
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://t.me/cveNotify/150004 · Telegram Post
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note