CVE-2026-22316

CWE-121 — Stack-based Buffer Overflow3 documents3 sources
Severity
6.5MEDIUM
EPSS
0.1%
top 72.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
77
Phoenix Contact FL NAT 2008Phoenix Contact FL NAT 2208Phoenix Contact FL NAT 2304-2gc-2sfp+74 more
Timeline
PublishedMar 18

Description

A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Overflow, resulting in a DoS attack.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HExploitability: 2.8 | Impact: 3.6

Affected Packages77 packages

▶CVEListV5phoenix_contact/fl_nat_20080.0.0 — 3.53
▶CVEListV5phoenix_contact/fl_nat_22080.0.0 — 3.53
▶CVEListV5phoenix_contact/fl_switch_20050.0.0 — 3.53
▶CVEListV5phoenix_contact/fl_switch_20080.0.0 — 3.53
▶CVEListV5phoenix_contact/fl_switch_20160.0.0 — 3.53

🔴Vulnerability Details

2
CVEList
Buffer Overflow using TFTP Filename↗2026-03-18
▶
GHSA
GHSA-c7gg-49qc-mfhm: A remote attacker with user privileges for the webUI can use the setting of the TFTP Filename with a POST Request to trigger a stack-based Buffer Over↗2026-03-18
▶