CVE-2026-1627

Katalog CVE

CVSS 8.1 · High EPSS 0,21%

Kerentanan Use of a Broken or Risky Cryptographic Algorithm pada sick lms1000 firmware, sick mrs1000 firmware. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic.

Rincian

Terbit di NVD

27 Februari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-327: Use of a Broken or Risky Cryptographic Algorithm

EPSS (30 hari)

0,21% peluang dieksploitasi; lebih tinggi dari 10,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://sick.com/psirt advisory vendor
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json advisory vendor
• https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf advisory vendor
• https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_e... advisory vendor
• https://www.cisa.gov/resources-tools/resources/ics-recommended-practices pemerintah AS
• https://www.first.org/cvss/calculator/3.1 not applicable