Vulnerability Description
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.
Related Weaknesses (CWE)
References
- https://portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-C
- https://portal.opengear.com/customerservice/s/article/Release-Notification-Firmw
FAQ
What is CVE-2026-102212?
CVE-2026-102212 is a documented vulnerability. Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi p...
How severe is CVE-2026-102212?
CVSS scoring is not yet available for CVE-2026-102212. Check NVD for updates.
Is there a patch for CVE-2026-102212?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.