VULNERABILITY INTELLIGENCE

CVE-2026-22320

CVSS score6.5 MEDIUM
EPSS probability0.33%
CISA KEVNot currently listed
Published2026-03-18
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Description

A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.

Weakness classification

  • CWE-121: Stack-based Buffer Overflow

Primary references