CVE-2026-80143

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 (affected versions not specified) SLCx-03 (affected versions not specified) SLCx-02 (affected versions not specified)

Description Authenticated attackers can execute arbitrary shell commands as root by exploiting an undocumented mfc eeprom read command. The issue occurs because unsanitized user input is passed directly to a system() call. By authenticating as any user via the terminal or CLI interface, an attacker can inject malicious commands through the unsanitized parameter, leading to a complete loss of confidentiality, integrity, and availability of the device and potentially affecting downstream serial-attached devices.

Recommendations Update SLC8000 to firmware version 9.7.0.2 or later. Update SLC9000 to firmware version 9.7.0.2 or later. Update EMG8500 to firmware version 9.7.0.1 or later. Update EMG7500 to firmware version 9.7.0.1 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for SLB882, SLCx-03, and SLCx-02.