TI-2026-83548 Aliases CVE-2026-102212 GHSA-6gjc-q635-685r

Heap buffer overflow in Opengear console server firmware

LOW 38CWE-122Published 2026-10-31 · Updated 2026-11-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Attack requirements: Present
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-122 and the CVSS impact.

Summary

Opengear IM7200, CM7100 and ACM7000 firmware from 4.8 through 5.5.2 is affected. A heap buffer overflow (CWE-122) in index.cgi is triggered by an overlong Content-Disposition name field in a multipart/form-data POST request. An unauthenticated remote attacker can crash the index.cgi process.

Written with Claude Haiku 5.5 from the sources below · 2026-11-01

Description from the CNA

Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.0032 25th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Opengear	IM7200	4.8 – 5.5.2	—	No fix listed	CNA
Opengear	CM7100	4.8 – 5.5.2	—	No fix listed	CNA
Opengear	ACM7000	4.8 – 5.5.2	—	No fix listed	CNA

IM7200 VendorOpengear Affected 4.8 – 5.5.2 Fixed in — No fix listed CNA
CM7100 VendorOpengear Affected 4.8 – 5.5.2 Fixed in — No fix listed CNA
ACM7000 VendorOpengear Affected 4.8 – 5.5.2 Fixed in — No fix listed CNA

Remediation

The sources list no fixed version for the Opengear IM7200, CM7100 or ACM7000 firmware.

Written with Claude Haiku 5.5 from the sources below · 2026-11-01

Timeline

2026-10-31 Threatist record created from CVE-2026-102212
2026-10-31 Alias added: GHSA-6gjc-q635-685r
2026-11-02 Priority changed: MEDIUM → LOW
2026-11-06 CISA SSVC decision points changed

References

Patch 1

https://portal.opengear.com/customerservice/s/article/Release-Notification-Firmware-Version-5-5-3-is-Now-Generally-Available

Advisory 1

https://portal.opengear.com/customerservice/s/article/CVE-2026-102212-Opengear-Console-Server-Buffer-Overflow-to-RCE

TI-2011-03537 Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass… CVSS 2.0HIGH 7.5
TI-2019-10777 Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability… CVSS 3.0MEDIUM 5.4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences