CVE-2025-58587: Improper Restriction of Excessive Authentication Attempts

Critical severity · published Oct 6, 2025

CVE-2025-58587

Improper Restriction of Excessive Authentication Attempts

9.8

CVSS

0.5%

EPSS

On KEV

Description

The application does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it possible for an attacker to guess user credentials.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

High

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.5% · higher than 42% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Baggage Analytics · SICK AG

before 4.6.3 · source: vendor, NVD

Enterprise Analytics · SICK AG

all versions · source: vendor, NVD

Logistic Diagnostic Analytics · SICK AG

before 4.6.3 · source: vendor, NVD

Package Analytics · SICK AG

before 4.6.3 · source: vendor, NVD

Tire Analytics · SICK AG

before 4.6.3 · source: vendor, NVD

Affected product

Baggage Analytics

SICK AG

All Baggage Analytics CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-58587

CVE.org

https://www.cve.org/CVERecord?id=CVE-2025-58587

Vendor Advisory

https://sick.com/psirt

US Government Resource

https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

Not Applicable

https://www.first.org/cvss/calculator/3.1

Vendor Advisory

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json

Vendor Advisory

https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf

Product

https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf