CVE-2026-22320 | BDVDB-2026-320992 Detail
Phoenix ContactFL SWITCH 2005
Description#
A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.
Impact#
Per CVSS v3.1: confidentiality impact none, integrity impact none, availability impact high. Attack vector: network.
Weaknesses#
- CWE-121 Stack-based Buffer Overflow
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.