Input Validation Flaw in SICK Products
CVE-2025-58582

5.3MEDIUM

Key Information:

Vendor

Sick Ag

Status
Enterprise Analytics
Vendor
CVE Published:
6 October 2025

What is CVE-2025-58582?

A security flaw exists in SICK products whereby incorrect login attempts generate logs of user credentials. These entries are susceptible to exploitation as the system does not properly validate the POST request data, allowing adversaries to submit excessively large payloads, which could lead to potential log overflow issues or denial of service.

Affected Version(s)

Enterprise Analytics all versions

References

https://sick.com/psirt
x_SICK PSIRT Security Advisories
https://www.sick.com/media/docs/9/19/719/special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-58582 : Input Validation Flaw in SICK Products