Home

Description

A stack based buffer overflow exists in an API route of XWEB Pro version 1.12.1 and prior, enabling unauthenticated attackers to cause stack corruption and a termination of the program.

PUBLISHED Reserved 2026-02-05 | Published 2026-02-27 | Updated 2026-03-02 | Assigner icscert




MEDIUM: 4.3CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Problem types

WE-121

Product status

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Default status
unaffected

Any version
affected

Credits

Amir Zaltzman and Noam Moshe of Claroty Team82 reported this vulnerability to CISA. finder

References

webapps.copeland.com/Dixell/Pages/SystemSoftwareUpdate

www.cisa.gov/news-events/ics-advisories/icsa-26-057-10

github.com/...p/csaf_files/OT/white/2026/icsa-26-057-10.json

cve.org (CVE-2026-20797)

nvd.nist.gov (CVE-2026-20797)

Download JSON