PT-2025-43924 · Sick Ag+1 · Tloc100-100 With Firmware <7.1.1+2

Published 2025-10-27 · Updated 2025-11-03 · CVE-2025-59460

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions versions prior to 2025

Description The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access, increasing the risk of unauthorised connections.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-1391

Related Identifiers

CVE-2025-59460

Affected Products

Tloc100-100 With Firmware <7.1.1

Tloc100-100 With Firmware >=7.1.1

Tloc100-100 Firmware

References · 11

• https://sick.com/psirt · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-59460 · Security Note
• https://osv.dev/vulnerability/CVE-2025-59460 · Vendor Advisory
• https://sick.com/.well-known/csaf/white/2025/sca-2025-0013.json · Vendor Advisory
• https://first.org/cvss/calculator/3.1 · Note
• https://t.me/cveNotify/141408 · Telegram Post
• https://twitter.com/CVEnew/status/1982760687152554302 · Twitter Post
• https://t.me/CVEtracker/35823 · Telegram Post
• https://sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf · Note
• https://cisa.gov/resources-tools/resources/ics-recommended-practices · Note