Medium severity · published Mar 18, 2026
CVE-2026-22320
Stack-Based Buffer Overflow in TFTP File-Transfer Command Handling over CLI
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
None
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 26% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FS
FL SWITCH 2005 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2008 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2016 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2105 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2108 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2116 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2204-2TC-2SFX · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2205 · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2206-2FX · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2206-2FX SM · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2206-2FX SM ST · Phoenix Contact
0.0.0 before 3.53 · source: vendor
FS
FL SWITCH 2206-2FX ST · Phoenix Contact
0.0.0 before 3.53 · source: vendor
Affected product
FS
FL SWITCH 2005
Phoenix Contact
More from FL SWITCH 2005
7.2
CVE-2026-22317
Command Injection Vulnerability in Root CA Certificate Transfer Workflow
7.1
CVE-2026-22323
Cross‑Site Request Forgery in Link Aggregation Configuration
7.1
CVE-2026-22322
Stored Cross‑Site Scripting in Link Aggregation Name Handling
6.5
CVE-2026-22316
Buffer Overflow using TFTP Filename
5.3
CVE-2026-22321
Stack-Based Buffer Overflow in CLI Login Username Handling over CLI