CVE-2024-45168: Uci IDOL2

Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days.

An issue was discovered in UCI IDOL 2 (aka uciIDOL or IDOL2) through 2.12. Data is transferred over a raw socket without any authentication mechanism. Thus, communication endpoints are not verifiable.

Affected products

• Uci IDOL2: up to and including 2.12

Published 2024-08-22. Last modified 2026-06-17.