2 lines
4.0 KiB
JSON
2 lines
4.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"SICK LMS1000","vendor":"SICK AG","versions":[{"lessThanOrEqual":"<=2.4.0","status":"affected","version":"0","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"SICK MRS1000","vendor":"SICK AG","versions":[{"lessThanOrEqual":"<=2.4.0","status":"affected","version":"0","versionType":"custom"}]}],"source":"psirt@sick.de"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sick:lms1000_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"88192768-5BFB-4267-BF9A-7D35C79DC6AA","versionEndExcluding":"2.4.1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sick:lms1000:-:*:*:*:*:*:*:*","matchCriteriaId":"909B274C-06A9-4AFB-A298-6E32A0BD11B7","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:sick:mrs1000_firmware:*:*:*:*:*:*:*:*","matchCriteriaId":"487CA09F-7ECD-4A1F-A2CF-DAA9FA6C68BF","versionEndExcluding":"2.4.1","vulnerable":true}],"negate":false,"operator":"OR"},{"cpeMatch":[{"criteria":"cpe:2.3:h:sick:mrs1000:-:*:*:*:*:*:*:*","matchCriteriaId":"A99E9D30-4967-46EB-A046-8FD8718FD9EA","vulnerable":false}],"negate":false,"operator":"OR"}],"operator":"AND"}],"cveTags":[],"descriptions":[{"lang":"en","value":"An attacker may exploit the use of weak CBC-based cipher suites in the device’s SSH service to potentially observe or manipulate parts of the encrypted SSH communication, if they are able to intercept or interact with the network traffic."},{"lang":"es","value":"Un atacante puede explotar el uso de suites de cifrado débiles basadas en CBC en el servicio SSH del dispositivo para potencialmente observar o manipular partes de la comunicación SSH cifrada, si son capaces de interceptar o interactuar con el tráfico de red."}],"id":"CVE-2026-1626","lastModified":"2026-06-17T10:16:12.823","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":2.8,"impactScore":3.6,"source":"psirt@sick.de","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.2,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2026-1626","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2026-02-27T16:37:09.401689Z","version":"2.0.3"}}]},"published":"2026-02-27T09:16:15.863","references":[{"source":"psirt@sick.de","tags":["Vendor Advisory"],"url":"https://sick.com/psirt"},{"source":"psirt@sick.de","tags":["US Government Resource"],"url":"https://www.cisa.gov/resources-tools/resources/ics-recommended-practices"},{"source":"psirt@sick.de","tags":["Not Applicable"],"url":"https://www.first.org/cvss/calculator/3.1"},{"source":"psirt@sick.de","tags":["Vendor Advisory"],"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.json"},{"source":"psirt@sick.de","tags":["Vendor Advisory"],"url":"https://www.sick.com/.well-known/csaf/white/2026/sca-2026-0005.pdf"},{"source":"psirt@sick.de","tags":["Vendor Advisory"],"url":"https://www.sick.com/media/docs/9/19/719/special_information_sick_operating_guidelines_cybersecurity_by_sick_en_im0106719.pdf"}],"sourceIdentifier":"psirt@sick.de","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-327"}],"source":"psirt@sick.de","type":"Secondary"}]}
|