CVE-2025-59460: sick tloc100-100 firmware

csirt@kutim:~/threat-intel/cve/CVE-2025-59460

CVSS 7.5 · High EPSS 0,43%

Kerentanan Use of Weak Credentials pada sick tloc100-100 firmware. Skor CVSS 3.1 7.5 (High) menurut sick.de.

Deskripsi (NVD)

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

Rincian

Terbit di NVD: 27 Oktober 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 7.5 (High), sumber sick.de
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-1391: Use of Weak Credentials
EPSS (30 hari): 0,43% peluang dieksploitasi; lebih tinggi dari 35,7% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
sick	tloc100-100 firmware	Semua versi sebelum 7.1.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://sick.com/psirt advisory vendor
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json advisory vendor
https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf advisory vendor
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices pemerintah AS
https://www.first.org/cvss/calculator/3.1 not applicable
https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_e... product

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.