This vulnerability (CVE-2025-58585) affects SICK AG's Baggage Analytics product by exposing sensitive system information through multiple unauthenticated endpoints. The issue is categorized under CWE-497, which involves exposure of sensitive system information to an unauthorized control sphere. The CVSS v3.1 base score is 5.3 (medium), with attack vector network, low attack complexity, no privileges required, no user interaction, and impact limited to confidentiality loss. There is no indication of integrity or availability impact. No patch or official remediation guidance is currently available.

The vulnerability allows an unauthenticated attacker to access sensitive system information, potentially aiding in reconnaissance and subsequent attacks. However, it does not allow modification or disruption of the system, limiting the impact to confidentiality only. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected endpoints where possible and monitor for unusual access patterns. Avoid exposing the vulnerable service to untrusted networks.