CVE-2026-1626: Critical severity SICK Lms1000 Firmware vulnerability
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2026-1626?
The severity of CVE-2026-1626 is considered high due to the potential for attackers to exploit weak CBC-based cipher suites in SSH communications.
How do I fix CVE-2026-1626?
To fix CVE-2026-1626, upgrade the affected SICK LMS1000 or MRS1000 firmware to a version above 2.4.1 that does not use weak CBC-based cipher suites.
What are the main risks associated with CVE-2026-1626?
The main risks associated with CVE-2026-1626 include the potential for attackers to observe or manipulate encrypted SSH communication if they can intercept network traffic.
Which devices are affected by CVE-2026-1626?
CVE-2026-1626 affects SICK LMS1000 and MRS1000 devices running firmware versions below 2.4.1.
What type of vulnerability is CVE-2026-1626?
CVE-2026-1626 is a cryptographic vulnerability related to the use of weak cipher suites in the SSH service.