Atop Technologies EHG2408 Series Switch Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

A stack-based buffer overflow vulnerability has been identified in the EHG2408 series switch by Atop Technologies. This vulnerability allows unauthenticated remote attackers to manipulate the program's execution flow and execute arbitrary code. The issue affects EHG2408 and EHG2408-2SFP switches running firmware versions prior to 3.36.

Impact

Exploitation of this vulnerability could lead to unauthorized control of the device, allowing attackers to execute arbitrary code with the privileges of the affected switch.

Remediation

Users are advised to update the switch's firmware to version 3.36 or later.