IoT
CVE-2026-1633
CRITICAL
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessConnect to device web interface
-
ExploitAccess unauthenticated management panel
-
ExecutionModify critical settings or factory reset
-
ImpactCompromise network serial communications
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A07:2025 - Authentication Failures
ASVS 5.0
V6 - Authentication Authentication required for critical functions
MITRE ATT&CK
1 technique across 1 tactic: Initial Access The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Synectix LAN 232 TRIO adapter with web management interface enabled and accessible over network. No authentication required on default deployment. Device must be reachable via HTTP/HTTPS on management port. |
| Impact | CVSS 10.0 — serial-to-ethernet adapters bridge legacy serial devices to IP networks. These often connect to industrial control systems, medical devices, or building automation. |
| Exploit ScenarioDerived | An attacker accesses the unprotected management interface to reconfigure serial port mappings, intercept serial communications, or inject commands to connected serial devices. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Mar 12, 2026
Synectix LAN 232 TRIO serial-to-ethernet adapter exposes its web management interface without authentication (CVSS 10.0), enabling unauthenticated control of serial devices.
Earlier versions of this analysis (1)
CVSS 10.0 missing authentication on Synectix serial-to-ethernet adapter management.
RemediationAI
Implement authentication. Isolate the adapter on a dedicated management VLAN.
Affected ProductsAI
Synectix LAN 232 TRIO
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The Synectix LAN 232 TRIO 3-port serial-to-ethernet adapter has a CWE-306 missing authentication on its web management interface, allowing complete unauthenticated control.
Know when IoT gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionCVE.org
The Synectix LAN 232 TRIO 3-Port serial to ethernet adapter exposes its web management interface without requiring authentication, allowing unauthenticated users to modify critical device settings or factory reset the device.
Executive ViewAI
Critical vulnerability in Synectix LAN 232 TRIO serial-to-ethernet adapters allows any network user to remotely modify device settings or perform factory resets without authentication, potentially disrupting industrial control systems and serial device communications. Organizations using these devices face immediate risk of operational disruption and unauthorized configuration changes until remediation is completed.
Implement network segmentation by restricting web management interface (typically port 80/443) access to authorized administrator subnets only using firewall rules; disable remote management access and allow only local LAN access; deploy WAF rules to block unauthenticated access to management interfaces; implement continuous network monitoring for unauthorized configuration attempts on these devices; maintain detailed inventory of all deployed units for rapid incident response.
Threat Intelligence Overview
NVD
CVE.org
EPSS
GitHub
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
A command injection vulnerability (CVSS 9.8). Risk factors: public PoC available.
Plaintext daemon credentials in IDC SFX2100 routing config files (zebra, bgpd, ospfd, ripd). CVSS 10.0. PoC available.
Remote command execution in Aqara Hub firmware (Camera Hub G3 4.1.9_0027, Hub M2 4.3.6_0027, and Hub M3 4.3.6_0025) stem
Kede Electronics IoT smart water meter monitoring platform v1.0 has a SQL injection allowing attackers to compromise the
An unauthenticated OS command injection in the CGI handler of Netcore NR289-GE firmware 1.4.5102 lets remote attackers e
Unauthenticated network attackers can bypass authentication in the Netcore NR289-GE router's boa_temp web handler and ab
Remote unauthenticated OS command injection in Netcore NR289-GE firmware 1.4.5102 allows attackers to execute arbitrary
Unauthenticated OS command injection in the Netcore NR289-GE router (firmware 1.4.5102) lets any remote attacker who can
A stack-based buffer overflow in the devdiscover service of FAST FAC1900R firmware 20190827_2.0.2 lets unauthenticated r
RIOT IoT operating system has an out-of-bounds read vulnerability (CVSS 9.1) that could lead to information disclosure o
Command injection in the Ziroom ZHOME A0101 smart-home hub (firmware 1.0.1.0) allows an attacker with high-privilege aut
Authenticated command injection in Ziroom ZHOME A0101 firmware 1.0.1.0 lets a privileged user execute arbitrary operatin
Exploit-DB