CVE-2026-22320CWE-121

Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI

Medium · published March 18, 2026

CVSS v3.1
6.5
EPSS
0%
Percentile
24.8
In the wild
Unconfirmed
What it is

A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00329 · 24.8th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2026-03-18T07:34Z
EPSS history
Timeline
  • 18 MAR 07:34Z
    Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
    cvelistv5