CVE-2026-0993
7.5HighPublished 15 Oct 2026 · NVD status: Deferred · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
- Impact
- High impact on availability
- Weakness
- CWE-120
Impact
Unauthenticated remote attackers can crash the switch, knocking out management access and dropping all network traffic forwarding. All they need is network reachability to the device's web interface to send a single malicious POST request.
Root cause
The embedded HTTP server's multipart/form-data boundary parser fails to validate boundary length in the Content-Type header, causing a buffer overflow.
Affected systems
SODOLA SL902-SWTGW124AS firmware before 200.2.12
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Fix & remediation
Upgrade device firmware to version 200.2.12 or later. If upgrading immediately is not possible, restrict or block network access to the switch's HTTP/HTTPS management web interface via ACLs or a dedicated management VLAN.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.