CVE-2025-58587: Improper Restriction of Excessive Authentication Attempts

Published Oct 6, 2025

Updated

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.

Affected Software

5 affected components

SICK Baggage Analytics

SICK Enterprise Analytics

SICK Logistic Diagnostic Analytics

SICK Package Analytics

SICK Tire Analytics

Remediation

Information

For Logistic Analytics Products: It is strongly recommended to update the product to version 4.6.3.

Event History

Oct 6, 2025

CVE Published

via MITRE·07:03 AM

Data Sourced

via MITRE·07:03 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-58587?

CVE-2025-58587 is classified as a moderate severity vulnerability due to the risk of credential guessing attacks.

How do I fix CVE-2025-58587?

To fix CVE-2025-58587, implement account lockout mechanisms after a certain number of failed authentication attempts.

What applications are affected by CVE-2025-58587?

CVE-2025-58587 affects SICK Baggage Analytics, SICK Enterprise Analytics, SICK Logistic Diagnostic Analytics, SICK Package Analytics, and SICK Tire Analytics.

What type of attack is possible due to CVE-2025-58587?

CVE-2025-58587 makes it possible for attackers to execute brute-force attacks to guess user credentials.

How can I test for CVE-2025-58587 in my application?

To test for CVE-2025-58587, perform a series of failed login attempts to check if the application has adequate restrictions on excessive authentication attempts.