A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.

Project Subscriptions

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Wed, 18 Mar 2026 07:45:00 +0000

Type Values Removed Values Added
Description A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.
Title Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
Weaknesses CWE-121
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H'}


Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: CERTVDE

Published:

Updated: 2026-03-18T07:34:23.026Z

Reserved: 2026-01-07T11:49:15.178Z

Link: CVE-2026-22320

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-03-18T08:16:29.017

Modified: 2026-03-18T08:16:29.017

Link: CVE-2026-22320

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses