Description
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SICK | TLOC100-100 with Firmware <7.1.1 | < <7.1.1 | <7.1.1 |
| SICK | TLOC100-100 with Firmware >=7.1.1 | — | >=7.1.1 |
Advisories 1
- SCA-2025-0013 Vulnerabilities affecting SICK TLOC100-100 SICK PSIRT · Nov 11, 2025
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf vendor-advisory