CVE-2026-0993: SODOLA SL902-SWTGW124AS, грешка в паметта

Описание

Оригинално описание

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.

Засегнати продукти

• SODOLA SL902-SWTGW124AS: до 200.2.12

Вид слабост

• CWE-120 Копиране в буфер без проверка на размера на входа

История

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-0993
• https://nvd.nist.gov/vuln/detail/CVE-2026-0993
• https://hml.io/posts/blog-post-cve-2026-0993/
• https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-buffer-overflow-dos-via-multipart-boundary-parser