CVE-2025-58580: Injection via log file

Published Oct 6, 2025

Updated

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Affected Software

1 affected component

SICK Enterprise Analytics

Event History

Oct 6, 2025

CVE Published

via MITRE·06:49 AM

Data Sourced

via MITRE·06:49 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-58580?

The severity of CVE-2025-58580 is medium, rated at 6.5.

What risks are associated with CVE-2025-58580?

CVE-2025-58580 poses a risk of log manipulation, allowing an attacker to falsify log entries.

How do I fix CVE-2025-58580?

To fix CVE-2025-58580, ensure proper validation and sanitization of input data for API endpoints that handle log entries.

What software is affected by CVE-2025-58580?

CVE-2025-58580 affects SICK Enterprise Analytics software.

When was CVE-2025-58580 published?

CVE-2025-58580 was published on October 6, 2025.

CVE-2025-58580: Injection via log file

Affected Software

Event History

Don't miss critical vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2025-58580?

What risks are associated with CVE-2025-58580?

How do I fix CVE-2025-58580?

What software is affected by CVE-2025-58580?

When was CVE-2025-58580 published?

Company

Resources

Contact

Frequently Asked Questions

What is the severity of CVE-2025-58580?

What risks are associated with CVE-2025-58580?

How do I fix CVE-2025-58580?

What software is affected by CVE-2025-58580?

When was CVE-2025-58580 published?