Vulnerability · Published Feb 3, 2026 · Assigned by icscert
CVE-2026-1633Synectix LAN 232 TRIO Missing Authentication for Critical Function
Critical 10.0
In plain English
A critical-severity missing authentication in LAN 232 TRIO from Synectix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)10.0Critical
Exploit odds (30 days)0.6%top 51.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical device settings or factory reset the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Synectix | LAN 232 TRIO | All versions |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H