Stack-Based Buffer Overflow in EHG2408 Series Switch by Atop Technologies
CVE-2026-3823

9.3CRITICAL

Key Information:

Vendor

Atop Technologies

Status
Ehg2408
Ehg2408-2sfp
Vendor
CVE Published:
9 March 2026

What is CVE-2026-3823?

The EHG2408 series switch from Atop Technologies is susceptible to a stack-based buffer overflow vulnerability, enabling unauthenticated remote attackers to manipulate the execution flow of the program. This flaw can allow adversaries to execute arbitrary code on the affected device, posing significant risks to network integrity and security. Proper mitigation strategies should be implemented to safeguard against potential exploitation, ensuring all relevant patches and updates are applied promptly.

Affected Version(s)

EHG2408 0 < 3.36

EHG2408-2SFP 0 < 3.36

References

https://www.twcert.org.tw/tw/cp-132-10752-5a4d9-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10753-e091e-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.