CVE-2025-59462: falha de média gravidade em SICK AG TLOC100-100 all Firmware versions
Denial-of-service (DoS) via delayed or missing client response
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.5%
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
SICK AG · TLOC100-100 all Firmware versionsCVEs relacionadas — SICK AG TLOC100-100 all Firmware versions
No mesmo produto, das mais perigosas para as menos.
Referências
https://sick.com/psirthttps://www.cisa.gov/resources-tools/resources/ics-recommended-practiceshttps://www.first.org/cvss/calculator/3.1https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdfhttps://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.jsonhttps://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf