CVE-2025-58580: Injection via log file
Published Oct 6, 2025
·Updated
An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.
Affected Software
1 affected component
SICK Enterprise Analytics
Event History
Oct 6, 2025
CVE Published
via MITRE·06:49 AM
Data Sourced
via MITRE·06:49 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·07:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-58580?
The severity of CVE-2025-58580 is medium, rated at 6.5.
2
What risks are associated with CVE-2025-58580?
CVE-2025-58580 poses a risk of log manipulation, allowing an attacker to falsify log entries.
3
How do I fix CVE-2025-58580?
To fix CVE-2025-58580, ensure proper validation and sanitization of input data for API endpoints that handle log entries.
4
What software is affected by CVE-2025-58580?
CVE-2025-58580 affects SICK Enterprise Analytics software.
5
When was CVE-2025-58580 published?
CVE-2025-58580 was published on October 6, 2025.