CVE-2026-22319

{"id": "CVE-2026-22319", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "info@cert.vde.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2026-03-18T08:16:28.537", "references": [{"url": "https://certvde.com/de/advisories/VDE-2025-104", "source": "info@cert.vde.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "info@cert.vde.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "A stack-based buffer overflow in the device's file installation workflow allows a high-privileged attacker to send oversized POST parameters that overflow a fixed-size stack buffer within an internal process, resulting in a DoS attack."}, {"lang": "es", "value": "Un desbordamiento de b\u00fafer basado en pila en el flujo de trabajo de instalaci\u00f3n de archivos del dispositivo permite a un atacante con altos privilegios enviar par\u00e1metros POST de tama\u00f1o excesivo que desbordan un b\u00fafer de pila de tama\u00f1o fijo dentro de un proceso interno, lo que resulta en un ataque de DoS."}], "lastModified": "2026-03-18T14:52:44.227", "sourceIdentifier": "info@cert.vde.com"}