{"id":"CVE-2025-58580","url":"https://www.cyber-defence.io/tools/cve/CVE-2025-58580","generatedAt":"2026-10-28T05:59:14.724Z","title":"An API endpoint allows arbitrary log entries to be created via POST request.","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","published":"2025-10-06T07:15:34.000Z","lastModified":"2026-10-09T10:10:00.000Z","status":"Analyzed","sourceIdentifier":"psirt@sick.de","cvss":{"version":"3.1","score":5.3,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"cwe":["CWE-117"],"affected":["sick/enterprise analytics"],"epss":{"score":0.00365,"percentile":0.30195,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://sick.com/psirt","tags":["Vendor Advisory"],"source":"psirt@sick.de"},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["US Government Resource"],"source":"psirt@sick.de"},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["Not Applicable"],"source":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json","tags":["Vendor Advisory"],"source":"psirt@sick.de"},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf","tags":["Vendor Advisory"],"source":"psirt@sick.de"},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","tags":["Product"],"source":"psirt@sick.de"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2025-58580","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}