CVE-2026-102212

{"id": "CVE-2026-102212", "cveTags": [], "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "e8a6bb0b-e373-42b1-a5de-93e314325576", "cvssData": {"Safety": "PRESENT", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.4, "Automatable": "YES", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:P/AU:Y/R:X/V:X/RE:L/U:Red", "exploitMaturity": "UNREPORTED", "providerUrgency": "RED", "userInteraction": "NONE", "attackComplexity": "HIGH", "attackRequirements": "PRESENT", "privilegesRequired": "NONE", "subIntegrityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "LOW", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "e8a6bb0b-e373-42b1-a5de-93e314325576", "affectedData": [{"vendor": "Opengear", "product": "IM7200", "versions": [{"status": "affected", "version": "4.8", "versionType": "firmware", "lessThanOrEqual": "5.5.2"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}, {"vendor": "Opengear", "product": "CM7100", "versions": [{"status": "affected", "version": "4.8", "versionType": "firmware", "lessThanOrEqual": "5.5.2"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}, {"vendor": "Opengear", "product": "ACM7000", "versions": [{"status": "affected", "version": "4.8", "versionType": "firmware", "lessThanOrEqual": "5.5.2"}], "platforms": ["Linux"], "defaultStatus": "unaffected"}]}], "published": "2026-10-31T16:16:52.553", "references": [{"url": "https://portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-Console-Server-Buffer-Overflow-to-RCE", "source": "e8a6bb0b-e373-42b1-a5de-93e314325576"}, {"url": "https://portal.opengear.com/customerservice/s/article/Release-Notification-Firmware-Version-5-5-3-is-Now-Generally-Available", "source": "e8a6bb0b-e373-42b1-a5de-93e314325576"}], "vulnStatus": "Received", "weaknesses": [{"type": "Secondary", "source": "e8a6bb0b-e373-42b1-a5de-93e314325576", "description": [{"lang": "en", "value": "CWE-122"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field."}], "lastModified": "2026-10-31T16:16:52.553", "sourceIdentifier": "e8a6bb0b-e373-42b1-a5de-93e314325576"}