Approved changes feed: RSS · Atom

cpe:2.3:o:sick:tloc100-100_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorSick (7f3a0778-9cb3-5791-a25c-ef23979e3fe0)
ProductTloc100 100 Firmware (d4622dbf-d4e6-56df-896a-dceab8e1a097)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-59463 vulnerable 2026-06-08 07:35:21.960472 Denial-of-service (DoS) via chunk size mismatch
MEDIUM (4.3)
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
Published: 2025-10-27T10:14:31.607Z
Updated: 2025-10-27T18:05:28.122Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59462 vulnerable 2026-06-08 07:35:21.959995 Denial-of-service (DoS) via delayed or missing client response
MEDIUM (6.5)
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
Published: 2025-10-27T10:12:55.225Z
Updated: 2025-10-27T18:07:30.977Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59461 vulnerable 2026-06-08 07:35:21.959372 API does not require authentication
HIGH (7.6)
A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.
Published: 2025-10-27T10:11:46.163Z
Updated: 2025-10-27T18:08:15.868Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59460 vulnerable 2026-06-08 07:35:21.957147 Unsecure access configuration
HIGH (7.5)
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Published: 2025-10-27T10:10:31.105Z
Updated: 2025-10-27T18:10:18.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-59459 vulnerable 2026-06-08 07:35:21.954475 Denial-of-service (DoS) via resource consumption
MEDIUM (5.5)
An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.
Published: 2025-10-27T10:09:03.229Z
Updated: 2026-02-27T08:33:45.879Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.