Security Vulnerability Report
中文
CVE-2025-59459 CVSS 5.5 MEDIUM

CVE-2025-59459

Published: 2025-10-27 11:15:41
Last Modified: 2025-11-03 19:53:46

Description

An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.

CVSS Details

CVSS Score
5.5
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Configurations (Affected Products)

cpe:2.3:o:sick:tloc100-100_firmware:*:*:*:*:*:*:*:* - VULNERABLE
cpe:2.3:h:sick:tloc100-100:-:*:*:*:*:*:*:* - NOT VULNERABLE
SICK Industrial Sensors - Multiple product models affected
SICK Factory Automation Equipment - Specific versions affected
Refer to SCA-2025-0013 advisory for complete version list

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/bin/bash # CVE-2025-59459 PoC - Local SSH Service Disruption # Requires low-privilege SSH access to target SICK device TARGET_HOST="<target_ip>" USERNAME="<low_privilege_user>" PASSWORD="<user_password>" # Establish SSH connection and trigger service disruption # Note: Actual exploitation method may vary based on specific vulnerability ssh ${USERNAME}@${TARGET_HOST} << 'EOF' # Example actions that may disrupt SSH service # Specific PoC details depend on vendor advisory SCA-2025-0013 # Attempt to trigger the vulnerability # This is a placeholder - refer to official SICK advisory for exact steps cat /proc/self/status | grep -i "seccomp" # Verify service disruption systemctl status sshd 2>/dev/null || service ssh status 2>/dev/null EOF echo "Check if SSH service is still responsive on ${TARGET_HOST}"

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2025-59459", "sourceIdentifier": "[email protected]", "published": "2025-10-27T11:15:40.600", "lastModified": "2025-11-03T19:53:46.460", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "baseScore": 5.5, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "LOW", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 3.6}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "baseScore": 7.5, "baseSeverity": "HIGH", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "availabilityImpact": "HIGH"}, "exploitabilityScore": 3.9, "impactScore": 3.6}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-770"}]}], "configurations": [{"operator": "AND", "nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:sick:tloc100-100_firmware:*:*:*:*:*:*:*:*", "versionEndExcluding": "7.1.1", "matchCriteriaId": "D6A0DB5E-E209-451C-AB27-A9F924D98C48"}]}, {"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": false, "criteria": "cpe:2.3:h:sick:tloc100-100:-:*:*:*:*:*:*:*", "matchCriteriaId": "224B60BD-6A7D-410A-A72E-18D0E669A39C"}]}]}], "references": [{"url": "https://sick.com/psirt", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.cisa.gov/resources-tools/resources/ics-recommended-practices", "source": "[email protected]", "tags": ["US Government Resource"]}, {"url": "https://www.first.org/cvss/calculator/3.1", "source": "[email protected]", "tags": ["Not Applicable"]}, {"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.json", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.sick.com/.well-known/csaf/white/2025/sca-2025-0013.pdf", "source": "[email protected]", "tags": ["Vendor Advisory"]}, {"url": "https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf", "source": "[email protected]", "tags": ["Product"]}]}}