CVE-2025-59463— Denial-of-service (DoS) via chunk size mismatch
Quick assessment
Affected
SICK AG TLOC100-100 all Firmware versions
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
SICK AG TLOC100-100是德国SICK公司的一款移动机器人定位系统。 SICK AG TLOC100-100存在安全漏洞，该漏洞源于可能导致块大小不匹配，从而阻止文件传输和后续传输。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-59463
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Denial-of-service (DoS) via chunk size mismatch
Source: CVE Program / CVE List V5
Vulnerability Description
An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
死锁
Source: CVE Program / CVE List V5
Vulnerability Title
SICK AG TLOC100-100 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
SICK AG TLOC100-100是德国SICK公司的一款移动机器人定位系统。 SICK AG TLOC100-100存在安全漏洞，该漏洞源于可能导致块大小不匹配，从而阻止文件传输和后续传输。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| SICK AG | TLOC100-100 all Firmware versions | all versions | - |
|
II. Public POCs for CVE-2025-59463
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-59463
请登录查看更多情报信息。
Same Patch Batch · SICK AG · 2025-10-27 · 5 CVEs total
| CVE-2025-59461 | 7.6 HIGH | API does not require authentication |
| CVE-2025-59460 | 7.5 HIGH | Unsecure access configuration |
| CVE-2025-59462 | 6.5 MEDIUM | Denial-of-service (DoS) via delayed or missing client response |
| CVE-2025-59459 | 5.5 MEDIUM | Denial-of-service (DoS) via resource consumption |
IV. Related Vulnerabilities
Same weakness: CWE-833
-
CVE-2026-70616
boringproxy 0.10.0 Resource Exhaustion DoS via GET /loading -
CVE-2026-10647
Deadlock denial of service in USB CDC-NCM device class on TX -
CVE-2026-47334
Deadlock or kernel panic in Ubuntu Linux AppArmor notificati -
CVE-2026-33904
Ella Core has a Denial of Service via SCTP connection cleanu -
CVE-2025-10150
Webserver crash caused by scanning on TCP port 80
V. Comments for CVE-2025-59463
No comments yet