{"api_version":"1","generated_at":"2026-10-22T16:18:30+00:00","cve":"CVE-2025-58589","urls":{"html":"https://cve.report/CVE-2025-58589","api":"https://cve.report/api/cve/CVE-2025-58589.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2025-58589","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-58589"},"summary":{"title":"Information Disclosure Through Stacktrace","description":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","state":"PUBLISHED","assigner":"SICK AG","published_at":"2025-10-06 07:15:35","updated_at":"2026-06-17 09:44:34"},"problem_types":["CWE-200","NVD-CWE-noinfo","CWE-200 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"],"metrics":[{"version":"3.1","source":"nvd@nist.gov","type":"Primary","score":"6.5","severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"psirt@sick.de","type":"Secondary","score":"2.7","severity":"LOW","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","data":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"}},{"version":"3.1","source":"CNA","type":"CVSS","score":"2.7","severity":"LOW","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","data":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","environmentalScore":2.7,"environmentalSeverity":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","temporalScore":2.7,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"}}],"references":[{"url":"https://www.first.org/cvss/calculator/3.1","name":"https://www.first.org/cvss/calculator/3.1","refsource":"psirt@sick.de","tags":["Not Applicable"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json","name":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json","refsource":"psirt@sick.de","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf","name":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf","refsource":"psirt@sick.de","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://sick.com/psirt","name":"https://sick.com/psirt","refsource":"psirt@sick.de","tags":["Vendor Advisory"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","name":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","refsource":"psirt@sick.de","tags":["US Government Resource"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","name":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","refsource":"psirt@sick.de","tags":["Product"],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2025-58589","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58589","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"SICK AG","product":"Baggage Analytics","version":"affected 4.6.3 custom","platforms":[]},{"source":"CNA","vendor":"SICK AG","product":"Tire Analytics","version":"affected 4.6.3 custom","platforms":[]},{"source":"CNA","vendor":"SICK AG","product":"Package Analytics","version":"affected 4.6.3 custom","platforms":[]},{"source":"CNA","vendor":"SICK AG","product":"Logistic Diagnostic Analytics","version":"affected 4.6.3 custom","platforms":[]}],"timeline":[],"solutions":[{"source":"CNA","title":"","value":"It is strongly recommended to update the product to version 4.6.3.","time":"","lang":"en"}],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2025","cve_id":"58589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sick","cpe5":"baggage_analytics","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"58589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sick","cpe5":"logistic_diagnostic_analytics","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"58589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sick","cpe5":"package_analytics","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2025","cve_id":"58589","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"sick","cpe5":"tire_analytics","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":{"cve_year":"2025","cve_id":"58589","cve":"CVE-2025-58589","epss":"0.003610000","percentile":"0.283400000","score_date":"2026-10-18","updated_at":"2026-10-19 00:13:06"},"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"metrics":[{"other":{"content":{"id":"CVE-2025-58589","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-10-06T17:53:38.746469Z","version":"2.0.3"},"type":"ssvc"}}],"providerMetadata":{"dateUpdated":"2025-10-06T18:19:55.909Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"title":"CISA ADP Vulnrichment"}],"cna":{"affected":[{"defaultStatus":"affected","product":"Baggage Analytics","vendor":"SICK AG","versions":[{"lessThan":"4.6.3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"affected","product":"Tire Analytics","vendor":"SICK AG","versions":[{"lessThan":"4.6.3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"affected","product":"Package Analytics","vendor":"SICK AG","versions":[{"lessThan":"4.6.3","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"affected","product":"Logistic Diagnostic Analytics","vendor":"SICK AG","versions":[{"lessThan":"4.6.3","status":"affected","version":"0","versionType":"custom"}]}],"descriptions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.</p>"}],"value":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application."}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":2.7,"baseSeverity":"LOW","confidentialityImpact":"LOW","environmentalScore":2.7,"environmentalSeverity":"LOW","integrityImpact":"NONE","privilegesRequired":"HIGH","scope":"UNCHANGED","temporalScore":2.7,"temporalSeverity":"LOW","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-200","description":"CWE-200 Exposure of Sensitive Information to an Unauthorized Actor","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2026-05-13T11:52:23.944Z","orgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","shortName":"SICK AG"},"references":[{"tags":["x_SICK PSIRT Security Advisories"],"url":"https://sick.com/psirt"},{"tags":["x_SICK Operating Guidelines"],"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"},{"tags":["x_ICS-CERT recommended practices on Industrial Security"],"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"},{"tags":["x_CVSS v3.1 Calculator"],"url":"https://www.first.org/cvss/calculator/3.1"},{"tags":["x_The canonical URL."],"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json"},{"tags":["vendor-advisory"],"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf"}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"It is strongly recommended to update the product to version 4.6.3."}],"value":"It is strongly recommended to update the product to version 4.6.3."}],"source":{"advisory":"SCA-2025-0010","discovery":"INTERNAL"},"title":"Information Disclosure Through Stacktrace","x_generator":{"engine":"csaf2cve 0.2.1"}}},"cveMetadata":{"assignerOrgId":"a6863dd2-93fc-443d-bef1-79f0b5020988","assignerShortName":"SICK AG","cveId":"CVE-2025-58589","datePublished":"2025-10-06T07:03:41.488Z","dateReserved":"2025-09-03T08:58:53.142Z","dateUpdated":"2026-05-13T11:52:23.944Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2025-10-06 07:15:35","lastModifiedDate":"2026-06-17 09:44:34","problem_types":["CWE-200","NVD-CWE-noinfo","CWE-200 CWE-200 Exposure of Sensitive Information to an Unauthorized Actor"],"metrics":{"cvssMetricV31":[{"source":"psirt@sick.de","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N","baseScore":2.7,"baseSeverity":"LOW","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":1.2,"impactScore":1.4},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-10-06T17:53:38.746469Z","id":"CVE-2025-58589","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:sick:baggage_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"E62416BA-1BF1-43BD-98B2-57BD34128419"},{"vulnerable":true,"criteria":"cpe:2.3:a:sick:logistic_diagnostic_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"27031959-2981-4755-9E3D-02CD083F2B72"},{"vulnerable":true,"criteria":"cpe:2.3:a:sick:package_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"5955214B-0D71-449A-BFD4-8804FDF91CA1"},{"vulnerable":true,"criteria":"cpe:2.3:a:sick:tire_analytics:*:*:*:*:*:*:*:*","matchCriteriaId":"86C0BA69-E701-45A3-ADA5-130B8AD9DF15"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2025","CveId":"58589","Ordinal":"1","Title":"Information Disclosure Through Stacktrace","CVE":"CVE-2025-58589","Year":"2025"},"notes":[{"CveYear":"2025","CveId":"58589","Ordinal":"1","NoteData":"When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker thus receives information about the technology used and the structure of the application.","Type":"Description","Title":"Information Disclosure Through Stacktrace"}]}}}