CVEvulnerability
CVE-2025-59460
7.5 HIGH
Official page ↗
- Status
- Analyzed
- Published
- 2025-10-27
- Last modified
- 2026-10-18
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-1391
Description
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Affected configurations
• sick tloc100-100 firmware (< 7.1.1)
Related
Weakness · CWE (1)
- CWE-1391 Use of Weak Credentials weakness
References
- https://sick.com/psirt Vendor Advisory
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices US Government Resource
- https://www.first.org/cvss/calculator/3.1 Not Applicable
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json Vendor Advisory
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf Vendor Advisory
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf Product