CVE-2025-59460CWE-1391

CVE-2025-59460

High · published October 27, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
36.5
In the wild
Unconfirmed
What it is

⚡ Default settings are a hacker's playground! This vulnerability lets unauthorized users connect because configuration settings aren't up to snuff. 🔥 Think of it like leaving the front door of your house wide open, inviting anyone to step in without checking their ID. Your security setup needs a solid lock, and right now, it’s just a flimsy screen door. If exploited, an attacker could stroll right through that open door and gain unauthorized access to sensitive data, potentially leading to data breaches or manipulation of system configurations. The consequences could be absolutely devastating for your digital fortress!

Put simply

Think of it like leaving the front door of your house wide open, inviting anyone to step in without checking their ID. Your security setup needs a solid lock, and right now, it’s just a flimsy screen door. This vulnerability stems from the system being deployed with default configuration settings that fail to restrict access adequately. Without adhering to best practices, unauthorized connections can be easily established, leaving your system susceptible to attacks.

What to do

If exploited, an attacker could stroll right through that open door and gain unauthorized access to sensitive data, potentially leading to data breaches or manipulation of system configurations. The consequences could be absolutely devastating for your digital fortress! To mitigate this risk, immediately review and update your configuration settings according to the latest security best practices. Implement strong access controls and regularly audit your system to ensure compliance. Don't forget to inform your team about these updates! You've got this! With these steps, you’ll not only secure your system but also earn that security hero badge! 🦸

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00432 · 36.5th percentile
Weakness
CWE-1391 · Use of Weak Credentials
Published
2025-10-27T15:15Z
Affected products (1)
ProductVersionsFixed in
sick/tloc100-100_firmware< 7.1.17.1.1
References (6)
EPSS history
Timeline
  • 27 OCT 10:10Z
    Unsecure access configuration
    cvelistv5