CVE-2025-59460
HIGHCVSS 7.5/10EPSS 0.39%
Last modified
CVE-2025-59460 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.. EPSS estimates a 0.39% chance of exploitation in the next 30 days.
Description
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sick | Tloc100-100 Firmware | < 7.1.1 |
References
- https://sick.com/psirtVendor Advisory
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practicesUS Government Resource
- https://www.first.org/cvss/calculator/3.1Not Applicable
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-59460?
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
How severe is CVE-2025-59460?
CVE-2025-59460 has a CVSS score of 7.5/10 (HIGH severity). The EPSS model estimates a 0.39% probability of exploitation in the next 30 days.
How do I fix CVE-2025-59460?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-59455In JetBrains TeamCity before 2025.07.2 project isolation byp…4.2
- CVE-2025-59456In JetBrains TeamCity before 2025.07.2 path traversal was po…5.5
- CVE-2025-59457In JetBrains TeamCity before 2025.07.2 missing Git URL valid…7.7
- CVE-2025-59458In JetBrains Junie before 252.284.66, 251.284.66, 243.284.66…9.8
- CVE-2025-59459An attacker that gains SSH access to an unprivileged account…7.5
- CVE-2025-5946Improper Neutralization of Special Elements used in an OS Co…7.2
- CVE-2025-59461A remote unauthenticated attacker may use the unauthenticate…9.8
- CVE-2025-59462An attacker who tampers with the C++ CLI client may crash th…7.5
- CVE-2025-59463An attacker may cause chunk-size mismatches that block file …7.5
- CVE-2025-59464A memory leak in Node.js’s OpenSSL integration occurs when c…7.5
- CVE-2025-59465A malformed `HTTP/2 HEADERS` frame with oversized, invalid `…7.5
- CVE-2025-59466We have identified a bug in Node.js error handling where "Ma…7.5
Are you affected by CVE-2025-59460?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST