SICK AG Tloc100-100 Firmware vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting SICK AG Tloc100-100 Firmware: 5 record(s), with affected versions and fixes.cpe:2.3:o:sick:tloc100-100_firmware
CVE-2025-59463
High · 7.5
CWE-833 Oct 27, 2025
Denial-of-service (DoS) via chunk size mismatch
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
CVE-2025-59462
High · 7.5
CWE-248 Oct 27, 2025
Denial-of-service (DoS) via delayed or missing client response
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
CVE-2025-59460
High · 7.5
CWE-1391 Oct 27, 2025
Unsecure access configuration
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
CVE-2025-59461
Critical · 9.8
CWE-862 Oct 27, 2025
API does not require authentication
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
CVE-2025-59459
High · 7.5
CWE-770 Oct 27, 2025
Denial-of-service (DoS) via resource consumption
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.