SICK TLOC100-100 Unsecure Access Configuration Vulnerability

A vulnerability has been identified in the SICK TLOC100-100 product, all versions, including the firmware version 7.1.1. The vulnerability arises from the system being deployed with default configuration settings that do not align with current best practices for access restriction. This default state increases the risk of unauthorized connections. The issue is compounded by the fact that the device operates on an outdated operating system, which may be vulnerable to known threats.

Impact

Exploitation of this vulnerability could lead to unauthorized access and connections, potentially allowing attackers to manipulate the device or disrupt its services.

Remediation

Users are strongly recommended to upgrade to the latest release of TLOC100-100 (version 7.1.1 or later).