CVE-2026-1775CWE-306

Missing Authentication for Critical Function in Labkotec LID-3300IP

High · published March 3, 2026

CVSS v4.0
8.8
EPSS
1%
Percentile
54.0
In the wild
Unconfirmed
What it is

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.

The record
Technical detail
CVSS v4.0
8.8 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00737 · 54.0th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-03-03T21:21Z
EPSS history
Timeline
  • 03 MAR 21:21Z
    Missing Authentication for Critical Function in Labkotec LID-3300IP
    cvelistv5