This vulnerability (CVE-2025-58579) in SICK AG Baggage Analytics is caused by missing authentication controls on an endpoint, which permits unauthenticated users to request data. This exposure leads to user enumeration, classified under CWE-497 (Exposure of Sensitive System Information to an Unauthorized Control Sphere). The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, and limited confidentiality impact without integrity or availability effects. No patch or vendor advisory is currently available to confirm remediation status.

An attacker can access sensitive system information without authentication, enabling user enumeration. This could aid further reconnaissance but does not directly affect system integrity or availability. The confidentiality impact is limited, as indicated by the CVSS score and vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the vulnerable endpoint through network controls or authentication proxies if possible.