CVE-2025-59460

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

CVSS 3.1

7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.4% chance of exploitation in the next 30 days; higher than 37% of CVEs (scores of 2026-10-25)

CWE

CWE-1391

Published

2025-10-27

Modified

2026-10-18

Record from

the NVD, synced 2026-10-19

Affected

• sick:tloc100-100_firmware

References

• https://sick.com/psirt
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• https://www.first.org/cvss/calculator/3.1
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json
• https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf

Check your stackJSON