VULNERABILITY INTELLIGENCE

CVE-2025-58580

CVSS score6.5 MEDIUM
EPSS probability0.36%
CISA KEVNot currently listed
Published2025-10-06
Last modified2026-10-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Description

An API endpoint allows arbitrary log entries to be created via POST request. Without sufficient validation of the input data, an attacker can create manipulated log entries and thus falsify or dilute logs, for example.

Weakness classification

  • psirt@sick.de: CWE-117

Primary references