# CVE-2025-59462: An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.

Source: https://junglewise.ai/threats/cve-2025-59462-an-attacker-who-tampers-with-the-c-cli-client-may-crash-the  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2025-10-27  
License: CC BY 4.0 with a link back

CVE-2025-59462 · Severity: medium · CVSS 6.5 · Published 2025-10-27

An attacker who tampers with the C++ CLI client may crash the UpdateService during file transfers, disrupting updates and availability.

Technologies: [Sick Tloc100-100](https://junglewise.ai/threats/technologies/tloc100-100), [Sick Tloc100-100 Firmware](https://junglewise.ai/threats/technologies/tloc100-100-firmware). Vendors: [Sick](https://junglewise.ai/threats/vendors/sick).

## Quick answers

**Is CVE-2025-59462 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2025-59462 being exploited in the wild.

**How severe is CVE-2025-59462?** Medium severity, with a CVSS score of 6.5, published 27 October 2025.

**Which products and versions are affected?** Sick Tloc100-100, Sick Tloc100-100 Firmware. The advisory does not name versions.

**Is there a fix for CVE-2025-59462?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2025-59462?** Check whether you run Sick Tloc100-100 or Sick Tloc100-100 Firmware. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Sick Tloc100-100
- Sick Tloc100-100 Firmware

## Related threats

- [An attacker may cause chunk-size mismatches that block file transfers and prevent subsequent transfers.](https://junglewise.ai/threats/cve-2025-59463-an-attacker-may-cause-chunk-size-mismatches-that-block-file)
- [A remote unauthenticated attacker may use the unauthenticated C++ API to access or modify sensitive data and disrupt services.](https://junglewise.ai/threats/cve-2025-59461-a-remote-unauthenticated-attacker-may-use-the-unauthenticated-c)
- [The system is deployed in its default state, with configuration settings that do not comply with the latest best…](https://junglewise.ai/threats/cve-2025-59460-the-system-is-deployed-in-its-default-state-with-configuration)
- [An attacker that gains SSH access to an unprivileged account may be able to disrupt services (including SSH), causing…](https://junglewise.ai/threats/cve-2025-59459-an-attacker-that-gains-ssh-access-to-an-unprivileged-account-may)