CVE-2026-1775

Missing Authentication for Critical Function in Labkotec LID-3300IP

CVSS 8.8 HIGHEPSS 0.8%CWE-306

Vexday Risk Score

21Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 8.8EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

03 Mar 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Labkotec · LID-3300IP Labkotec · LID-3300IP Type 2

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-05