Description
An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SICK | SICK LMS1000 | ≤ <=2.4.0 | — |
| SICK | SICK MRS1000 | ≤ <=2.4.0 | — |
Advisories 1
- SCA-2026-0005 Vulnerabilities affecting SICK LMS1000 and SICK MRS1000 SICK PSIRT · Feb 27, 2026
References
- https://sick.com/psirt
- https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf
- https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
- https://www.first.org/cvss/calculator/3.1
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json
- https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf vendor-advisory