CVE-2026-1626

Katalog CVE

CVSS 9.1 · Critical EPSS 0,21%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada sick lms1000 firmware, sick mrs1000 firmware. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.

Rincian

Terbit di NVD

27 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 9,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sick.com/psirt advisory vendor
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json advisory vendor
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf advisory vendor
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_e... advisory vendor
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices pemerintah AS
• https://www.first.org/cvss/calculator/3.1 not applicable