CVE-2026-105285

Summary

This vulnerability allows for a stack-based buffer overflow through manipulation of the 'addQos/comment/entry_name' argument, leading to potential remote code execution.

Exploitability

Exploitation is relatively easy given a public exploit reference, and requires remote access to the affected device.

Blast radius

If exploited, this could result in complete control of the device, leading to data loss, denial of service, or further attacks.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to the fixed version 1.0.0-B20230403.1455 or later.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.