Based on the description, it is inferred that the vulnerability allows unauthenticated actors to retrieve detailed information about all components, their versions, and license data used by the application. This disclosure exposes security weaknesses of third‑party components, enabling attackers to identify and exploit known vulnerabilities. The weakness corresponds to CWE‑200, an Information Disclosure issue, and can compromise confidentiality by revealing sensitive configuration data.

SICK AG Incoming Goods Suite is affected. The specific product is the Incoming Goods Suite application distributed by SICK AG. No explicit version range is provided in the advisory, so all installations of the suite are potentially impacted.

The reported CVSS score of 5.3 indicates a moderate risk level, while the EPSS score of less than 1% shows a very low probability of exploitation at the time of analysis. The issue is not listed in the CISA KEV catalog, suggesting it is not a known exploit in the wild. Attackers could target this weakness by accessing public or internal web interfaces without authentication and collecting component metadata to plan further attacks.