CVE-2026-1775

HIGH

Labkotec LID-3300IP - Command Injection

Title source: llm
STIX 2.1

Description

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.

Scores

CVSS v4 8.8
EPSS 0.0003
EPSS Percentile 7.6%
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:H/SC:N/SI:N/SA:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-306
Status published
Published Mar 03, 2026
Tracked Since Mar 04, 2026