Vulnerabilities affecting SICK LMS1000 and SICK MRS1000
Two vulnerabilities affect the SICK LMS1000 and SICK MRS1000 product families. The vulnerabilities allow the use of weak cryptographic configurations in the SSH service, which may enable an attacker with network access to observe, manipulate, or compromise the integrity of SSH communications. SICK recommends applying the defined remediations for both vulnerabilities.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-1627US | high8.1OT erhöht | — | ||
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of… | ||||
| CVE-2026-1626US | critical9.1OT erhöht | — | ||
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they a… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- BehobenSICK LMS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- BehobenSICK LMS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- BehobenSICK MRS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
- BehobenSICK MRS1000 with firmware <=2.4.0
Users are strongly recommended to upgrade to release version 2.4.1.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan