{"id":"CVE-2025-58580","aliases":["EUVD-2025-32200","GHSA-8rhc-gwc6-w584"],"status":"published","title":"Injection via log file","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00365,"percentile":0.30651,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-117"],"published":"2025-10-06T06:49:27Z","modified":"2026-10-09T10:10:00Z","products":[{"vendor":"sick","product":"enterprise_analytics"},{"vendor":"sick ag","product":"enterprise analytics"}],"references":[{"url":"https://sick.com/psirt","tags":["x_SICK PSIRT Security Advisories","Vendor Advisory"]},{"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf","tags":["x_SICK Operating Guidelines","Product"]},{"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices","tags":["x_ICS-CERT recommended practices on Industrial Security","US Government Resource"]},{"url":"https://www.first.org/cvss/calculator/3.1","tags":["x_CVSS v3.1 Calculator","Not Applicable"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.json","tags":["x_The canonical URL.","Vendor Advisory"]},{"url":"https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0010.pdf","tags":["vendor-advisory","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58580"},{"url":"https://github.com/advisories/GHSA-8rhc-gwc6-w584"}],"sources":{"cve":[{"id":"CVE-2025-58580","title":"Injection via log file","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","status":"published","published":"2025-10-06T06:49:27.619Z","modified":"2025-10-06T12:21:24.059Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-117"],"updated_at":"2026-11-02T14:32:37.027582Z"}],"euvd":[{"id":"EUVD-2025-32200","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","status":"published","published":"2025-10-06T06:49:27Z","modified":"2025-10-06T12:21:24Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T20:31:36.284733Z"}],"ghsa":[{"id":"GHSA-8rhc-gwc6-w584","title":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without...","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","status":"published","published":"2025-10-06T09:30:19Z","modified":"2025-10-06T09:30:26Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-117"],"updated_at":"2026-11-02T15:03:51.880401Z"}],"nvd":[{"id":"CVE-2025-58580","description":"An API  endpoint  allows  arbitrary  log  entries  to  be  created  via  POST request.  Without sufficient  validation  of the  input data, an attacker  can create manipulated log entries and thus falsify or dilute logs, for example.","status":"published","published":"2025-10-06T07:15:34.4Z","modified":"2026-10-09T10:10:00.193Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-117"],"updated_at":"2026-11-02T14:11:35.93863Z"}]}}