← Back

CVE-2026-1626

nvd nist
Published: Feb 27, 2026Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

Affected (2)

Sick
2 products
Lms1000 Firmware
Mrs1000 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Lms1000 Firmware
Before 2.4.1
Running on/withPlatform Versions
Sick
Lms1000
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Mrs1000 Firmware
Before 2.4.1
Running on/withPlatform Versions
Sick
Mrs1000
All versions

Related CWEs

CWE-327
Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.

References (6)

Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
US Government Resource
Source: psirt@sick.de
Not Applicable
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Vendor Advisory
Source: psirt@sick.de
Vendor Advisory

Timeline

No history available yet.