Description (CNA)
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SICK AG / TLOC100-100 with Firmware <7.1.1 | affected 0 before <7.1.1 |
| SICK AG / TLOC100-100 with Firmware >=7.1.1 | unaffected >=7.1.1 |
CWE
CWE-1391
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf
ADP enrichment
No English description supplied.
No references supplied.