CVE-2026-80147

Name of the Vulnerable Software and Affected Versions SLC8000 versions prior to 9.7.0.2 SLC9000 versions prior to 9.7.0.2 EMG8500 versions prior to 9.7.0.1 EMG7500 versions prior to 9.7.0.1 SLB882 (affected versions not specified) SLCx-03 (affected versions not specified) SLCx-02 (affected versions not specified)

Description A stack-based buffer overflow occurs when an undocumented mfc eeprom write command copies unbounded user input into a bounded stack buffer before passing it to a system() call. Authenticated attackers can access the terminal or CLI interface as any user and provide oversized input to trigger the overflow. This can lead to arbitrary code execution, resulting in a complete loss of confidentiality, integrity, and availability of the device and any downstream serial-attached devices.

Recommendations Update SLC8000 to firmware version 9.7.0.2 or later. Update SLC9000 to firmware version 9.7.0.2 or later. Update EMG8500 to firmware version 9.7.0.1 or later. Update EMG7500 to firmware version 9.7.0.1 or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for SLB882, SLCx-03, and SLCx-02.