CVE-2025-58581 MEDIUM

CVE-2025-58581: Information Disclosure Through Stacktrace-/MQTT/Config/changeAll

Vendor Sick Ag
Product Enterprise Analytics
Weakness CWE-200 · Info exposure
Published October 6, 2025
Last update October 6, 2025

CVSS base score

4.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

When an error occurs in the application a full stacktrace is provided to the user. The stacktrace lists class and method names as well as other internal information. An attacker can thus obtain information about the technology used and the structure of the application.

Key dates

02Disclosure timeline

October 6, 2025 CVE published
October 6, 2025 Record updated