Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2026-35083

Stack buffer overflow in method bac-deviceobject

Description

A remote attacker with user privileges can exploit a stack buffer overflow to gain full system access as root.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MBS Single-A

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-A Profibus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-A x-link

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Single-X

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X CAN

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X KNX

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X PROFINET

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Double-X x-link

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X KNX+M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+DALI

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+KNX

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+LON

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

MBS Triple-X PROFINET+M-Bus

Default version status: unaffected

  • V1_00_00 to < V6_00_07affected

References