Vulnerabilities affecting SICK LMS1000 and SICK MRS1000
Two vulnerabilities affect the SICK LMS1000 and SICK MRS1000 product families. The vulnerabilities allow the use of weak cryptographic configurations in the SSH service, which may enable an attacker with network access to observe, manipulate, or compromise the integrity of SSH communications. SICK recommends applying the defined remediations for both vulnerabilities.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-1627US | high8.1OT elevated | — | ||
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of… | ||||
| CVE-2026-1626US | critical9.1OT elevated | — | ||
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they a… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- FixedSICK LMS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- FixedSICK LMS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- FixedSICK MRS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- FixedSICK MRS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan