# CVE-2025-59459: An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing…

Source: https://junglewise.ai/threats/cve-2025-59459-an-attacker-that-gains-ssh-access-to-an-unprivileged-account-may  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-27  
License: CC BY 4.0 with a link back

CVE-2025-59459 · Severity: medium · CVSS 5.5 · Published 2025-10-27

An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing persistent loss of availability.

Technologies: [Sick Tloc100-100](https://junglewise.ai/threats/technologies/tloc100-100), [Sick Tloc100-100 Firmware](https://junglewise.ai/threats/technologies/tloc100-100-firmware). Vendors: [Sick](https://junglewise.ai/threats/vendors/sick).

## Quick answers

**Is CVE-2025-59459 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-59459 being exploited in the wild.

**How severe is CVE-2025-59459?** Medium severity, with a CVSS score of 5.5, published 27 October 2025.

**Which products and versions are affected?** Sick Tloc100-100, Sick Tloc100-100 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-59459?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-59459?** Check whether you run Sick Tloc100-100 or Sick Tloc100-100 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Sick Tloc100-100
- Sick Tloc100-100 Firmware

## Related threats

- [An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.](https://junglewise.ai/threats/cve-2025-59463-an-attacker-may-cause-chunk-size-mismatches-that-block-file)
- [An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.](https://junglewise.ai/threats/cve-2025-59462-an-attacker-who-tampers-with-the-c-cli-client-may-crash-the)
- [A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.](https://junglewise.ai/threats/cve-2025-59461-a-remote-unauthenticated-attacker-may-use-the-unauthenticated-c)
- [The system is deployed in its default state, with configuration settings that do not comply with the latest best…](https://junglewise.ai/threats/cve-2025-59460-the-system-is-deployed-in-its-default-state-with-configuration)