Description

A stack-based buffer overflow in the CLI's TFTP file‑transfer command handling allows a low-privileged attacker with Telnet/SSH access to trigger memory corruption by supplying unexpected or oversized filename input. Exploitation results in the corruption of the internal buffer, causing the CLI and web dashboard to become unavailable and leading to a denial of service.

INFO

Published Date :

2026-03-18T07:34:23.026Z

Last Modified :

2026-03-18T13:33:41.112Z

Source :

CERTVDE
AFFECTED PRODUCTS

The following products are affected by CVE-2026-22320 vulnerability.

Vendors Products
Phoenixcontact
  • Fl Nat 2008
  • Fl Nat 2208
  • Fl Nat 2304-2gc-2sfp
  • Fl Switch 2005
  • Fl Switch 2008
  • Fl Switch 2008f
  • Fl Switch 2016
  • Fl Switch 2105
  • Fl Switch 2108
  • Fl Switch 2116
  • Fl Switch 2204-2tc-2sfx
  • Fl Switch 2205
  • Fl Switch 2206-2fx
  • Fl Switch 2206-2fx Sm
  • Fl Switch 2206-2fx Sm St
  • Fl Switch 2206-2fx St
  • Fl Switch 2206-2sfx
  • Fl Switch 2206-2sfx Pn
  • Fl Switch 2206c-2fx
  • Fl Switch 2207-fx
  • Fl Switch 2207-fx Sm
  • Fl Switch 2208
  • Fl Switch 2208 Pn
  • Fl Switch 2208c
  • Fl Switch 2212-2tc-2sfx
  • Fl Switch 2214-2fx
  • Fl Switch 2214-2fx Sm
  • Fl Switch 2214-2sfx
  • Fl Switch 2214-2sfx Pn
  • Fl Switch 2216
  • Fl Switch 2216 Pn
  • Fl Switch 2303-8sp1
  • Fl Switch 2304-2gc-2sfp
  • Fl Switch 2306-2sfp
  • Fl Switch 2306-2sfp Pn
  • Fl Switch 2308
  • Fl Switch 2308 Pn
  • Fl Switch 2312-2gc-2sfp
  • Fl Switch 2314-2sfp
  • Fl Switch 2314-2sfp Pn
  • Fl Switch 2316
  • Fl Switch 2316/k1
  • Fl Switch 2316 Pn
  • Fl Switch 2404-2tc-2sfx
  • Fl Switch 2406-2sfx
  • Fl Switch 2406-2sfx Pn
  • Fl Switch 2408
  • Fl Switch 2408 Pn
  • Fl Switch 2412-2tc-2sfx
  • Fl Switch 2414-2sfx
  • Fl Switch 2414-2sfx Pn
  • Fl Switch 2416
  • Fl Switch 2416 Pn
  • Fl Switch 2504-2gc-2sfp
  • Fl Switch 2506-2sfp
  • Fl Switch 2506-2sfp/k1
  • Fl Switch 2506-2sfp Pn
  • Fl Switch 2508
  • Fl Switch 2508/k1
  • Fl Switch 2508 Pn
  • Fl Switch 2512-2gc-2sfp
  • Fl Switch 2514-2sfp
  • Fl Switch 2514-2sfp Pn
  • Fl Switch 2516
  • Fl Switch 2516 Pn
  • Fl Switch 2608
  • Fl Switch 2608 Pn
  • Fl Switch 2708
  • Fl Switch 2708 Pn
  • Fl Switch 5916-8gc-4sfp+
  • Fl Switch 5916sfp-8gc-4sfp+
  • Fl Switch 5924-4gc
  • Fl Switch 5924-4sfp+
  • Fl Switch 5924sfp-4gc
  • Fl Switch Tsn 2312-2gc-2sfp
  • Fl Switch Tsn 2314-2sfp
  • Fl Switch Tsn 2316
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2026-22320.

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact