Home

Description

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.

PUBLISHED Reserved 2026-02-02 | Published 2026-03-03 | Updated 2026-03-03 | Assigner icscert




HIGH: 8.8CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

Problem types

CWE-306 Missing Authentication for Critical Function

Product status

Default status
unaffected

All versions
affected

Default status
unaffected

Any version before 2.20
affected

Credits

Souvik Kandar reporter

References

www.cisa.gov/news-events/ics-advisories/icsa-26-062-05 government-resource

cve.org (CVE-2026-1775)

nvd.nist.gov (CVE-2026-1775)

Download JSON