CVE-2026-1775
Missing Authentication for Critical Function in Labkotec LID-3300IP
- State
- Published
- Severity
- 8.8 High
- Published
- Mar 3, 2026
- Updated
- Mar 4, 2026
- Reserved
- Feb 2, 2026
Description
The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 8.8 High | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N | icscert |
Weaknesses
- CWE-306 Missing Authentication for Critical Function
Affected Products
| Product | Versions |
|---|---|
LID-3300IPLabkotec |
|
LID-3300IP Type 2Labkotec |
|
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-05government-resource
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.