9.1
CVE-2026-1626
- EPSS 0.02%
- Veröffentlicht 27.02.2026 08:40:53
- Zuletzt bearbeitet 05.03.2026 02:13:42
- Quelle psirt@sick.de
- CVE-Watchlists
- Unerledigt
LoginAn attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sick ≫ Lms1000 Firmware Version < 2.4.1
Sick ≫ Mrs1000 Firmware Version < 2.4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.038 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 9.1 | 3.9 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
|
| psirt@sick.de | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.