CVE-2025-58590

Medium CVSS: 6.5

It's possible to brute force folders and files, what can be used by an attacker to steal sensitve information.

Vendor

Product

CWE

Yayın Tarihi

2025-10-06 07:15:35

Güncelleme

2026-01-27 19:44:57

Source Identifier

psirt@sick.de

KEV Date Added

CWE-22 Baggage Analytics MEDIUM Sick 2025

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf

Medium

CVE-2026-1627

An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromis…

Medium

CVE-2026-1626

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or ma…

Medium

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft throu…

Medium

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attack…

Medium

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end user…

Low

CVE-2026-22920

The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks.