Savannah lwIP SMTP client buffer error vulnerability

The Savannah lwIP SMTP client version 2.2.1 has a buffer overflow vulnerability. This vulnerability arises from the SMTP client not checking the size of the input, which may lead to a buffer overflow...

PT-2026-107421

Name of the Vulnerable Software and Affected Versions Savannah lwIP SMTP client version 2.2.1 Description A buffer overflow exists in the SMTP client, which can be exploited to achieve remote code execution on industrial control systems. This issue allows attackers to perform lateral movement...

Savannah lwIP SMTP client

ADVISORY SUMMARY Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability...