Auth bypass in Labkotec Lid-3300ip

CVE-2026-1775

The Labkotec LID-3300IP has an existing vulnerability in the ice detector software that enables an unauthenticated attacker to alter device parameters and run operational commands when specially crafted packets are sent to the device.

Vulnerability class: Broken Authentication

EPSS: 0.008 (51.5th percentile) — read the EPSS interpretation.

Affected products

Labkotec Lid-3300ip — versions All versions
Labkotec Lid-3300ip Type 2 — versions 0

Weakness classification (CWE)

CWE-306 — Missing Authentication for Critical Function

References

ics-cert@hq.dhs.gov (government-resource)