A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.
Metrics
Affected Vendors & Products
References
| Link | Providers |
|---|---|
| https://certvde.com/de/advisories/VDE-2025-104 |
|
History
Wed, 18 Mar 2026 12:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Phoenixcontact
Phoenixcontact fl Nat 2008 Phoenixcontact fl Nat 2208 Phoenixcontact fl Nat 2304-2gc-2sfp Phoenixcontact fl Switch 2005 Phoenixcontact fl Switch 2008 Phoenixcontact fl Switch 2008f Phoenixcontact fl Switch 2016 Phoenixcontact fl Switch 2105 Phoenixcontact fl Switch 2108 Phoenixcontact fl Switch 2116 Phoenixcontact fl Switch 2204-2tc-2sfx Phoenixcontact fl Switch 2205 Phoenixcontact fl Switch 2206-2fx Phoenixcontact fl Switch 2206-2fx Sm Phoenixcontact fl Switch 2206-2fx Sm St Phoenixcontact fl Switch 2206-2fx St Phoenixcontact fl Switch 2206-2sfx Phoenixcontact fl Switch 2206-2sfx Pn Phoenixcontact fl Switch 2206c-2fx Phoenixcontact fl Switch 2207-fx Phoenixcontact fl Switch 2207-fx Sm Phoenixcontact fl Switch 2208 Phoenixcontact fl Switch 2208 Pn Phoenixcontact fl Switch 2208c Phoenixcontact fl Switch 2212-2tc-2sfx Phoenixcontact fl Switch 2214-2fx Phoenixcontact fl Switch 2214-2fx Sm Phoenixcontact fl Switch 2214-2sfx Phoenixcontact fl Switch 2214-2sfx Pn Phoenixcontact fl Switch 2216 Phoenixcontact fl Switch 2216 Pn Phoenixcontact fl Switch 2303-8sp1 Phoenixcontact fl Switch 2304-2gc-2sfp Phoenixcontact fl Switch 2306-2sfp Phoenixcontact fl Switch 2306-2sfp Pn Phoenixcontact fl Switch 2308 Phoenixcontact fl Switch 2308 Pn Phoenixcontact fl Switch 2312-2gc-2sfp Phoenixcontact fl Switch 2314-2sfp Phoenixcontact fl Switch 2314-2sfp Pn Phoenixcontact fl Switch 2316 Phoenixcontact fl Switch 2316/k1 Phoenixcontact fl Switch 2316 Pn Phoenixcontact fl Switch 2404-2tc-2sfx Phoenixcontact fl Switch 2406-2sfx Phoenixcontact fl Switch 2406-2sfx Pn Phoenixcontact fl Switch 2408 Phoenixcontact fl Switch 2408 Pn Phoenixcontact fl Switch 2412-2tc-2sfx Phoenixcontact fl Switch 2414-2sfx Phoenixcontact fl Switch 2414-2sfx Pn Phoenixcontact fl Switch 2416 Phoenixcontact fl Switch 2416 Pn Phoenixcontact fl Switch 2504-2gc-2sfp Phoenixcontact fl Switch 2506-2sfp Phoenixcontact fl Switch 2506-2sfp/k1 Phoenixcontact fl Switch 2506-2sfp Pn Phoenixcontact fl Switch 2508 Phoenixcontact fl Switch 2508/k1 Phoenixcontact fl Switch 2508 Pn Phoenixcontact fl Switch 2512-2gc-2sfp Phoenixcontact fl Switch 2514-2sfp Phoenixcontact fl Switch 2514-2sfp Pn Phoenixcontact fl Switch 2516 Phoenixcontact fl Switch 2516 Pn Phoenixcontact fl Switch 2608 Phoenixcontact fl Switch 2608 Pn Phoenixcontact fl Switch 2708 Phoenixcontact fl Switch 2708 Pn Phoenixcontact fl Switch 5916-8gc-4sfp+ Phoenixcontact fl Switch 5916sfp-8gc-4sfp+ Phoenixcontact fl Switch 5924-4gc Phoenixcontact fl Switch 5924-4sfp+ Phoenixcontact fl Switch 5924sfp-4gc Phoenixcontact fl Switch Tsn 2312-2gc-2sfp Phoenixcontact fl Switch Tsn 2314-2sfp Phoenixcontact fl Switch Tsn 2316 |
|
| Vendors & Products |
Phoenixcontact
Phoenixcontact fl Nat 2008 Phoenixcontact fl Nat 2208 Phoenixcontact fl Nat 2304-2gc-2sfp Phoenixcontact fl Switch 2005 Phoenixcontact fl Switch 2008 Phoenixcontact fl Switch 2008f Phoenixcontact fl Switch 2016 Phoenixcontact fl Switch 2105 Phoenixcontact fl Switch 2108 Phoenixcontact fl Switch 2116 Phoenixcontact fl Switch 2204-2tc-2sfx Phoenixcontact fl Switch 2205 Phoenixcontact fl Switch 2206-2fx Phoenixcontact fl Switch 2206-2fx Sm Phoenixcontact fl Switch 2206-2fx Sm St Phoenixcontact fl Switch 2206-2fx St Phoenixcontact fl Switch 2206-2sfx Phoenixcontact fl Switch 2206-2sfx Pn Phoenixcontact fl Switch 2206c-2fx Phoenixcontact fl Switch 2207-fx Phoenixcontact fl Switch 2207-fx Sm Phoenixcontact fl Switch 2208 Phoenixcontact fl Switch 2208 Pn Phoenixcontact fl Switch 2208c Phoenixcontact fl Switch 2212-2tc-2sfx Phoenixcontact fl Switch 2214-2fx Phoenixcontact fl Switch 2214-2fx Sm Phoenixcontact fl Switch 2214-2sfx Phoenixcontact fl Switch 2214-2sfx Pn Phoenixcontact fl Switch 2216 Phoenixcontact fl Switch 2216 Pn Phoenixcontact fl Switch 2303-8sp1 Phoenixcontact fl Switch 2304-2gc-2sfp Phoenixcontact fl Switch 2306-2sfp Phoenixcontact fl Switch 2306-2sfp Pn Phoenixcontact fl Switch 2308 Phoenixcontact fl Switch 2308 Pn Phoenixcontact fl Switch 2312-2gc-2sfp Phoenixcontact fl Switch 2314-2sfp Phoenixcontact fl Switch 2314-2sfp Pn Phoenixcontact fl Switch 2316 Phoenixcontact fl Switch 2316/k1 Phoenixcontact fl Switch 2316 Pn Phoenixcontact fl Switch 2404-2tc-2sfx Phoenixcontact fl Switch 2406-2sfx Phoenixcontact fl Switch 2406-2sfx Pn Phoenixcontact fl Switch 2408 Phoenixcontact fl Switch 2408 Pn Phoenixcontact fl Switch 2412-2tc-2sfx Phoenixcontact fl Switch 2414-2sfx Phoenixcontact fl Switch 2414-2sfx Pn Phoenixcontact fl Switch 2416 Phoenixcontact fl Switch 2416 Pn Phoenixcontact fl Switch 2504-2gc-2sfp Phoenixcontact fl Switch 2506-2sfp Phoenixcontact fl Switch 2506-2sfp/k1 Phoenixcontact fl Switch 2506-2sfp Pn Phoenixcontact fl Switch 2508 Phoenixcontact fl Switch 2508/k1 Phoenixcontact fl Switch 2508 Pn Phoenixcontact fl Switch 2512-2gc-2sfp Phoenixcontact fl Switch 2514-2sfp Phoenixcontact fl Switch 2514-2sfp Pn Phoenixcontact fl Switch 2516 Phoenixcontact fl Switch 2516 Pn Phoenixcontact fl Switch 2608 Phoenixcontact fl Switch 2608 Pn Phoenixcontact fl Switch 2708 Phoenixcontact fl Switch 2708 Pn Phoenixcontact fl Switch 5916-8gc-4sfp+ Phoenixcontact fl Switch 5916sfp-8gc-4sfp+ Phoenixcontact fl Switch 5924-4gc Phoenixcontact fl Switch 5924-4sfp+ Phoenixcontact fl Switch 5924sfp-4gc Phoenixcontact fl Switch Tsn 2312-2gc-2sfp Phoenixcontact fl Switch Tsn 2314-2sfp Phoenixcontact fl Switch Tsn 2316 |
Wed, 18 Mar 2026 07:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service. | |
| Title | Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI | |
| Weaknesses | CWE-121 | |
| References |
| |
| Metrics |
cvssV3_1
|
Status: PUBLISHED
Assigner: CERTVDE
Published:
Updated: 2026-03-18T07:34:23.026Z
Reserved: 2026-01-07T11:49:15.178Z
Link: CVE-2026-22320
No data.
Status : Received
Published: 2026-03-18T08:16:29.017
Modified: 2026-03-18T08:16:29.017
Link: CVE-2026-22320
No data.
OpenCVE Enrichment
Updated: 2026-03-18T10:41:42Z