Opengear IM72XX/CM71XX/ACM70XX firmware: Heap-based buffer overflow in web interface
Summary
Firmware 4.8.0 through 5.5.2 on Opengear IM7200, CM7100 and ACM7000 console server appliances contains a heap-based buffer overflow in the handling of multipart/form-data POST requests to index.cgi. An unauthenticated remote attacker can send a crafted request with an overlong Content-Disposition name field to crash the index.cgi process, which is a denial of service. The CVSS vector suggests a higher impact, including possible code execution, but the vendor has not confirmed this in the sources reviewed.
Affected
- Opengear IM7200, CM7100 and ACM7000 (IM72XX, CM71XX, ACM70XX)
- Firmware versions 4.8.0 through 5.5.2
- Firmware before 4.8.0: Unknown.
Fixed in
- Firmware 5.5.3 is referenced by the vendor as the fix (not yet verified against the vendor advisory).
Workaround
- No vendor workaround found in the sources.
- If patching is not possible at once, restrict the web management interface to an admin network or VPN and block it from the internet.
Exploitation
- Exploited in the wild: Unknown. No known exploitation reported.
- Public proof-of-concept: None confirmed as of publication.
- CISA KEV: Not listed.
- Early findings, may change quickly.
Our recommendation
- Inventory IM7200, CM7100, ACM7000 and related units and their firmware versions.
- Ensure the management interface is not reachable from the internet and is limited to admin networks.
- Read the Opengear advisory, then plan and test the update to 5.5.3.
- Monitor the Opengear advisory and CISA KEV for changes.
- Priority high if any affected unit has a reachable management interface, otherwise medium.
Public exploits
PoC-in-GitHub, Metasploit and Exploit-DB list nothing for this CVE.
Research sources
- Opengear Advisory CVE-2026-102212 portal.opengear.com
- Opengear Release Notification Firmware 5.5.3 portal.opengear.com
- VulDB CVE-2026-102212 vuldb.com
- Opengear Device Updates opengear.com
- OffSeq Radar threat entry radar.offseq.com
Researched and written up in English and German by an AI (Claude by Anthropic) based on NVD, CISA, EPSS and the sources listed. The vendor information is authoritative. Researched on 1 Nov 2026, 11:44.
Original description (NVD)
Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Content-Disposition name field.
Sources
The tracker combines official, freely usable data sources – updated continuously:
- NVD (NIST) – CVEs, rating (CVSS), affected products
- CISA KEV – vulnerabilities confirmed by CISA as actively exploited
- CISA Vulnrichment – CISA assessment (SSVC) in the official CVE record
- FIRST EPSS – probability of exploitation
- Microsoft MSRC – Patch Tuesday: vulnerabilities, severity, updates
- PoC-in-GitHub – public proof-of-concept repositories
- Metasploit (Rapid7) – modules of the Metasploit Framework
- Exploit-DB (OffSec) – archive of public exploits (links only)
- Patch days: official vendor pages (linked per vendor) (Vendor patch days)
This product uses data from the NVD API but is not endorsed or certified by the NVD. EPSS data © FIRST.org.
Affected? We can help.
We check whether your systems are affected, install updates and close the gap – continuously with the System Health Checker if you wish.