CVE-2025-58591: Path Traversal

Published Oct 6, 2025

Updated

A remote, unauthorized attacker can brute force folders and files and read them like private keys or configurations, making the application vulnerable for gathering sensitive information.

Affected Software

4 affected components

SICK Baggage Analytics

SICK Logistic Diagnostic Analytics

SICK Package Analytics

SICK Tire Analytics

Remediation

Information

It is strongly recommended to update the product to version 4.6.3.

Event History

Oct 6, 2025

CVE Published

via MITRE·07:07 AM

Data Sourced

via MITRE·07:07 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-58591?

CVE-2025-58591 is a critical vulnerability that allows remote attackers to exploit path traversal to access sensitive files.

How do I fix CVE-2025-58591?

To mitigate CVE-2025-58591, ensure that proper input validation and access controls are implemented to prevent unauthorized file access.

What types of software are affected by CVE-2025-58591?

CVE-2025-58591 affects SICK Baggage Analytics, SICK Logistic Diagnostic Analytics, SICK Package Analytics, and SICK Tire Analytics.

Can CVE-2025-58591 lead to data breaches?

Yes, CVE-2025-58591 can result in unauthorized access to sensitive data, leading to potential data breaches.

What can an attacker gain from exploiting CVE-2025-58591?

An attacker exploiting CVE-2025-58591 can access private keys, configuration files, and other sensitive information from the system.