CVE-2026-1633CWE-306

Synectix LAN 232 TRIO Missing Authentication for Critical Function

Critical · published February 3, 2026

CVSS v4.0
10.0
EPSS
1%
Percentile
48.4
In the wild
Unconfirmed
What it is

🚨 An open web interface on the Synectix LAN 232 TRIO is a critical hole just waiting for someone to take advantage! 🔥 Think of it like leaving the door to your data center wide open—anyone walking by can wander in and change the locks, or worse, reset everything to factory defaults without a single key! An attacker could step right through that open door and wreak havoc—altering critical device settings, disrupting operations, or even factory resetting the device entirely. This could lead to major downtime, loss of configuration, and a significant headache for your network management!

Put simply

Think of it like leaving the door to your data center wide open—anyone walking by can wander in and change the locks, or worse, reset everything to factory defaults without a single key! This flaw allows unauthenticated users to access the web management interface of the Synectix LAN 232 TRIO, where they can modify settings or reset the device without any verification whatsoever.

What to do

An attacker could step right through that open door and wreak havoc—altering critical device settings, disrupting operations, or even factory resetting the device entirely. This could lead to major downtime, loss of configuration, and a significant headache for your network management! Immediately secure the device by implementing authentication for the web management interface. If an update or patch is available, apply it as soon as possible to prevent unauthorized access. Regularly audit your network for similar vulnerabilities to ensure ongoing protection. You've got this! Follow these steps, and you'll be on your way to securing your network in no time! 🛡️

The record
Technical detail
CVSS v4.0
10.0 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
EPSS
0.00607 · 48.4th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-02-03T23:02Z
EPSS history
Timeline
  • 03 FEB 23:02Z
    Synectix LAN 232 TRIO Missing Authentication for Critical Function
    cvelistv5