Heap-based Buffer Overflow in Opengear Console Server Appliances
CVE-2026-102212

8.4HIGH

Key Information:

Vendor

Opengear

Status
Im7200
Cm7100
Acm7000
Vendor
CVE Published:
31 October 2026

What is CVE-2026-102212?

A vulnerability exists in the firmware of Opengear's IM72XX, CM71XX, and ACM70XX console server appliances, where a heap-based buffer overflow can be triggered by an unauthenticated remote attacker. This occurs through a specially crafted multipart/form-data POST request containing an excessively long Content-Disposition name field, resulting in the potential for system instability and the crashing of the index.cgi process.

Affected Version(s)

ACM7000 Linux 4.8 <= 5.5.2

CM7100 Linux 4.8 <= 5.5.2

IM7200 Linux 4.8 <= 5.5.2

References

https://portal.opengear.com/customerservice/s/article/Rel...
patch
https://portal.opengear.com/customerservice/s/article/CVE...
vendor-advisory

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nick Cerne of Armadin
.