Description
The system is deployed in its default state, with configuration settings that do not comply with the latest best practices for restricting access. This increases the risk of unauthorised connections.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG TLOC100-100 with Firmware <7.1.1
Default version status: affected
0 to < <7.1.1affected
SICK AG TLOC100-100 with Firmware >=7.1.1
Default version status: unaffected
>=7.1.1unaffected
References
- https://sick.com/psirt ↗
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf ↗