CVE-2025-58586: For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a…

PriorityP427medium5.3CVSS 3.1

AVNACLPRNUINSUCLINAN

EPSS

0.33%

25.0th percentile

For failed login attempts, the application returns different error messages depending on whether the login failed due to an incorrect password or a non-existing username. This allows an attacker to guess usernames until they find an existing one.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
sick_ag	baggage_analytics	< 4.6.3	4.6.3
sick_ag	enterprise_analytics	—	—
sick_ag	logistic_diagnostic_analytics	< 4.6.3	4.6.3
sick_ag	package_analytics	< 4.6.3	4.6.3
sick_ag	tire_analytics	< 4.6.3	4.6.3

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.