Description
An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
SICK AG TLOC100-100 all Firmware versions
Default version status: affected
all versionsaffected
References
- https://sick.com/psirt ↗
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf ↗
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices ↗
- https://www.first.org/cvss/calculator/3.1 ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json ↗
- https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf ↗