{"id":"CVE-2026-102212","title":"Pre-Auth Heap Buffer Overflow in the Multipart Request","summary":"Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-d…","severity":"high","cvss":8.4,"cvssVector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/S:P/AU:Y/RE:L/U:Red","cvssSource":"cna","cwe":["CWE-122"],"vendor":"Opengear","product":"IM7200","affected":["IM7200 >= 4.8 <= 5.5.2","CM7100 >= 4.8 <= 5.5.2","ACM7000 >= 4.8 <= 5.5.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-11-06T13:48:15.446541Z"},"published":"2026-10-31","updated":"2026-11-06","sourceUpdated":"2026-11-06T13:48:25.489Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-102212","references":[{"url":"https://portal.opengear.com/customerservice/s/article/Release-Notification-Firmware-Version-5-5-3-is-Now-Generally-Available"},{"url":"https://portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-Console-Server-Buffer-Overflow-to-RCE"}],"tags":["cve.org"],"epss":0.0032,"epssPercentile":0.25098,"ingestedAt":"2026-11-05T16:24:31.553Z","slug":"CVE-2026-102212","body":"## Overview\n\nHeap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.\n\n## Affected\n\n- `IM7200 >= 4.8 <= 5.5.2`\n- `CM7100 >= 4.8 <= 5.5.2`\n- `ACM7000 >= 4.8 <= 5.5.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":46,"depthScoreParts":{"impact":46.2,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}