CVE-2025-59460: Unsecure access configuration

Published Oct 27, 2025

Updated

The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.

Affected Software

2 affected components

All of the following

SICK Tloc100-100 Firmware<7.1.1

SICK Tloc100-100

Remediation

Information

Users are strongly recommended to upgrade to the latest release of TLOC100-100 (>= 7.1.1).

Event History

Oct 27, 2025

CVE Published

via MITRE·10:10 AM

Data Sourced

via MITRE·10:10 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-59460?

CVE-2025-59460 has a severity rating that indicates a significant risk of unauthorized access due to improper default configurations.

How do I fix CVE-2025-59460?

To fix CVE-2025-59460, reconfigure the system settings to comply with the latest security best practices to restrict access.

Which systems are affected by CVE-2025-59460?

CVE-2025-59460 specifically affects the SICK Tloc100-100 Firmware versions up to 7.1.1.

What are the risks associated with CVE-2025-59460?

The risks associated with CVE-2025-59460 include potential unauthorized connections and data breaches due to lax security settings.

Is the SICK Tloc100-100 hardware itself vulnerable in CVE-2025-59460?

No, the SICK Tloc100-100 hardware is not vulnerable; the issue lies within the firmware configuration.