Vulnerability in Sick Lms1000
CVE-2026-1627
An attacker may exploit the use of outdated and weak MAC algorithms in the device’s SSH service to potentially compromise the integrity of the SSH session, allowing manipulation of transmitted data if the attacker can interact with the network traffic.
Vulnerability class: POODLE (CVE-2014-3566)
Published · last modified .
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.002 (9.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 10th percentile — 9.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.002 · newest: 0.002 · change: +0.000
Affected products
- Sick Lms1000
- Sick Lms1000 Firmware
- Sick Mrs1000
- Sick Mrs1000 Firmware
- Sick Ag Lms1000 — versions 0
- Sick Ag Mrs1000 — versions 0
Weakness classification (CWE)
References
- sick.com/psirt (x_SICK PSIRT Security Advisories, Vendor Advisory)
- www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_… (Vendor Advisory, x_SICK Operating Guidelines)
- www.cisa.gov/resources-tools/resources/ics-recommended-practices (US Government Resource, x_ICS-CERT recommended practices on Industrial Security)
- www.first.org/cvss/calculator/3.1 (x_CVSS v3.1 Calculator, Not Applicable)
- www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json (x_The canonical URL., Vendor Advisory)
- www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2026-1627?
- CVE-2026-1627 is a medium-severity vulnerability in Sick Lms1000, classified under Use of a Broken or Risky Cryptographic Algorithm. CVSS score: 6.5/10. Published 2026-02-27.
- How severe is CVE-2026-1627?
- Medium severity. CVSS v3 base score is 6.5 out of 10.