What’s Vulnerable › Vulnerabilities

CVE-2025-59460: Unsecure access configuration

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-10-27 · updated 2026-10-18
• Weakness: CWE-1391

Description

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

Affected products

• SICK AG TLOC100-100 all Firmware versions: before 7.1.1 — fixed in 7.1.1

How to fix

Upgrade to a fixed version: SICK AG TLOC100-100 all Firmware versions 7.1.1. Check the vendor advisory for mitigations.

References

• https://sick.com/psirt
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf

Get alerted when CVE-2025-59460 or the next vulnerability affects your stack