Authentication Bypass Vulnerability in SICK Products
CVE-2025-58587

6.5MEDIUM

Key Information:

Vendor

Sick Ag

Status
Baggage Analytics
Tire Analytics
Package Analytics
Logistic Diagnostic Analytics
Vendor
CVE Published:
6 October 2025

What is CVE-2025-58587?

The identified vulnerability in SICK applications allows malicious actors to exploit weak authentication measures, leading to multiple failed login attempts within a short period. This flaw can facilitate unauthorized access by enabling attackers to guess user credentials easily, thereby compromising sensitive user accounts. Strengthening authentication mechanisms is crucial to mitigate this risk.

Affected Version(s)

Baggage Analytics all versions

Enterprise Analytics all versions

Logistic Diagnostic Analytics all versions

References

https://sick.com/psirt
x_SICK PSIRT Security Advisories
https://www.sick.com/media/docs/9/19/719/special_informat...
x_SICK Operating Guidelines
https://www.cisa.gov/resources-tools/resources/ics-recomm...
x_ICS-CERT recommended practices on Industrial Security

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-58587 : Authentication Bypass Vulnerability in SICK Products