Description
SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.
Published: 2026-10-15
Score: 8.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via buffer overflow
Action: Immediate Patch
AI Analysis

Impact

SODOLA SL902-SWTGW124AS firmware before 200.2.12 has a buffer overflow that can be triggered by an oversized boundary value in the Content-Type header of a crafted HTTP POST request. This causes the device's embedded HTTP server to crash, leading the gateway to enter a recovery state during which it stops forwarding traffic and denies management access. The flaw is exploitable without authentication, allowing any remote attacker to flood the device and disrupt network services.

Affected Systems

The vulnerability affects the SODOLA SL902‑SWTGW124AS product line. Only firmware versions earlier than 200.2.12 are listed as affected; exact release dates or earlier version numbers are not provided. No other vendor or product is affected per the available CNA data.

Risk and Exploitability

The CVSS score of 8.7 reflects a high severity DoS impact with an unauthenticated attack vector. EPSS data is missing, but the lack of a listed KEV entry suggests no confirmed active exploitation yet. Attackers may craft a multipart/form-data POST request with an oversized boundary and send it over HTTP or HTTPS where the gateway accepts management commands. Because the flaw is remote and does not require privileged access, the overall risk remains significant for any network deploying vulnerable versions.

Generated by OpenCVE AI on October 15, 2026 at 11:44 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the device firmware to version 200.2.12 or later, which resolves the multipart boundary buffer overflow.
  • If an upgrade cannot be performed immediately, isolate the device by placing it in a separate VLAN or restricting management access, and block HTTP POST requests with excessively large Content-Type headers using a firewall or IDS rule.
  • Disable or remove the gateway’s embedded HTTP server or the multipart parsing capability if configuration options exist; alternatively, limit the maximum content‑type header length in the device’s HTTP settings to prevent the overflow.

Generated by OpenCVE AI on October 15, 2026 at 11:44 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 15 Oct 2026 16:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Thu, 15 Oct 2026 01:00:00 +0000

Type Values Removed Values Added
Description SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.
Title SODOLA SL902-SWTGW124AS Buffer Overflow DoS via Multipart Boundary Parser
Weaknesses CWE-120
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

cvssV4_0

{'score': 8.7, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-15T15:33:32.909Z

Reserved: 2026-01-15T14:50:35.274Z

Link: CVE-2026-0993

cve-icon Vulnrichment

Updated: 2026-10-15T15:33:29.553Z

cve-icon NVD

Status : Received

Published: 2026-10-15T01:19:27.290

Modified: 2026-10-15T16:17:29.413

Link: CVE-2026-0993

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-15T11:45:17Z

Weaknesses
  • CWE-120

    Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')