CVE-2025-59460
Unsecure access configuration
- State
- Published
- Severity
- 7.5 High
- Published
- Oct 27, 2025
- Updated
- Oct 27, 2025
- Reserved
- Sep 16, 2025
Description
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.5 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N | SICK AG |
Weaknesses
- CWE-1391 Use of Weak Credentials
Affected Products
| Product | Versions |
|---|---|
TLOC100-100 with Firmware <7.1.1SICK AG |
|
TLOC100-100 with Firmware >=7.1.1SICK AG |
|
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdfvendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.