{"id":"CVE-2026-1775","aliases":["EUVD-2026-9324","GHSA-v8pw-4mpx-qwjj"],"status":"published","title":"Missing Authentication for Critical Function in Labkotec LID-3300IP","description":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.","severity":{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00706,"percentile":0.53816,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2026-03-03T21:21:09Z","modified":"2026-06-17T10:16:29Z","products":[{"vendor":"labkotec","product":"lid-3300ip"},{"vendor":"labkotec","product":"lid-3300ip type 2"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-advisories/icsa-26-062-05","tags":["government-resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-1775"},{"url":"https://github.com/advisories/GHSA-v8pw-4mpx-qwjj"}],"sources":{"cve":[{"id":"CVE-2026-1775","title":"Missing Authentication for Critical Function in Labkotec LID-3300IP","description":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.","status":"published","published":"2026-03-03T21:21:09.269Z","modified":"2026-03-04T21:19:18.229Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:20:01.271368Z"}],"euvd":[{"id":"EUVD-2026-9324","description":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.","status":"published","published":"2026-03-03T21:21:09Z","modified":"2026-03-04T21:19:18Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"updated_at":"2026-11-02T19:48:10.597616Z"}],"ghsa":[{"id":"GHSA-v8pw-4mpx-qwjj","title":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables...","description":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.","status":"published","published":"2026-03-04T00:30:21Z","modified":"2026-03-04T00:30:30Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:06:26.357639Z"}],"nvd":[{"id":"CVE-2026-1775","description":"The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.","status":"published","published":"2026-03-03T22:16:27.77Z","modified":"2026-06-17T10:16:29.933Z","cvss":[{"version":"4.0","score":8.8,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:12:07.420927Z"}]}}