Buffer Overflow in SODOLA SL902-SWTGW124AS Firmware

Executive Summary

CVE-2026-0993 is a buffer overflow vulnerability in the SODOLA SL902-SWTGW124AS firmware before version 200.2.12. It allows unauthenticated remote attackers to cause a denial of service by sending a crafted POST request with an oversized boundary value in the Content-Type header. This exploits the device's embedded HTTP server's multipart/form-data boundary parser, causing the device to crash and become unresponsive until it recovers.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, monitor network traffic for POST requests with unusually large boundary values in the Content-Type header. Check for crashes or unresponsiveness in the SODOLA SL902-SWTGW124AS device after receiving such requests. Use packet capture tools like tcpdump or Wireshark to inspect HTTP headers for oversized boundaries.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can cause your SODOLA SL902-SWTGW124AS device to stop forwarding network traffic and become unresponsive for 11-13 seconds. During this time, you will lose all management access to the device. The attack requires no authentication and can be triggered by a single malicious HTTP request.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could impact compliance with standards like GDPR and HIPAA by enabling denial of service attacks that disrupt network traffic and management access. Unauthorized crashes may lead to unauthorized data access or loss during recovery, violating confidentiality and availability requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately restrict access to the device's management interface by blocking external traffic to ports 80 and 443. Update the firmware to version 200.2.12 or later if available. If the update is not available, isolate the device from untrusted networks until a patch is released.

Useful 0 Not Useful 0