8.1
CVE-2026-1627
- EPSS 0.02%
- Veröffentlicht 27.02.2026 08:43:30
- Zuletzt bearbeitet 05.03.2026 02:11:28
- Quelle psirt@sick.de
- CVE-Watchlists
- Unerledigt
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sick ≫ Lms1000 Firmware Version < 2.4.1
Sick ≫ Mrs1000 Firmware Version < 2.4.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.02% | 0.038 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.1 | 2.8 | 5.2 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
|
| psirt@sick.de | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
|
CWE-327 Use of a Broken or Risky Cryptographic Algorithm
The product uses a broken or risky cryptographic algorithm or protocol.