by Kastro CVE-2026-1626
SICK AG SICK LMS1000 — An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of…
Description · from the CVE record
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
Affected
ProductAffectedFixed inSource
SICK LMS1000≤ <=2.4.0–CNA
SICK MRS1000≤ <=2.4.0–CNA
Scores by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
SICK AG (CNA)6.5CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial