CVE-2025-59460

High CVSS: 7.5

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

Vendor

Sick

Product

Tloc100-100 Firmware

CWE

CWE-1391

Yayın Tarihi

2025-10-27 11:15:40

Güncelleme

2025-11-03 19:42:07

Source Identifier

psirt@sick.de

KEV Date Added

Kategoriler

CWE-1391 Tloc100-100 Firmware HIGH Sick 2025

Referanslar

https://sick.com/psirt https://www.cisa.gov/resources-tools/resources/ics-recommended-practices https://www.first.org/cvss/calculator/3.1 https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf

Benzer Kayıtlar

Medium

CVE-2026-1627

An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromis…

Medium

CVE-2026-1626

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or ma…

Medium

CVE-2026-22644

Certain requests pass the authentication token in the URL as string query parameter, making it vulnerable to theft throu…

Medium

CVE-2026-22645

The application discloses all used components, versions and license information to unauthenticated actors, giving attack…

Medium

CVE-2026-22646

Certain error messages returned by the application expose internal system details that should not be visible to end user…

Low

CVE-2026-22920

The device's passwords have not been adequately salted, making them vulnerable to password extraction attacks.