Vulnerabilidades do SICK AG Tloc100-100 Firmware
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam SICK AG Tloc100-100 Firmware: 5 registro(s), com versões afetadas e correções.cpe:2.3:o:sick:tloc100-100_firmware
CVE-2025-59463
Alta · 7.5
CWE-833 27/10/2025
Denial-of-service (DoS) via chunk size mismatch
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
CVE-2025-59462
Alta · 7.5
CWE-248 27/10/2025
Denial-of-service (DoS) via delayed or missing client response
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
CVE-2025-59460
Alta · 7.5
CWE-1391 27/10/2025
Unsecure access configuration
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
CVE-2025-59461
Crítica · 9.8
CWE-862 27/10/2025
API does not require authentication
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
CVE-2025-59459
Alta · 7.5
CWE-770 27/10/2025
Denial-of-service (DoS) via resource consumption
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.