---
id: CVE-2026-0993
title: >-
  SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow
  vulnerability that allows unauthenticated remote attackers to cause a denial
  of service by sending an oversized boundary value in the Content-Type header
  of a cr…
summary: >-
  SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow
  vulnerability that allows unauthenticated remote attackers to cause a denial
  of service by sending an oversized boundary value in the Content-Type header
  of a cr…
severity: high
cvss: 7.5
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'
cwe:
  - CWE-120
published: '2026-10-15'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T01:19:27.290'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-0993'
references:
  - url: 'https://hml.io/posts/blog-post-cve-2026-0993/'
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/sodola-sl902-swtgw124as-buffer-overflow-dos-via-multipart-boundary-parser
    label: disclosure@vulncheck.com
tags:
  - nvd
  - cve.org
ingestedAt: '2026-10-15T03:30:12.924Z'
vendor: SODOLA
product: SL902-SWTGW124AS
affected:
  - SL902-SWTGW124AS <= 200.2.12
---

## Overview

SODOLA SL902-SWTGW124AS firmware before 200.2.12 contains a buffer overflow vulnerability that allows unauthenticated remote attackers to cause a denial of service by sending an oversized boundary value in the Content-Type header of a crafted POST request. Attackers can exploit the embedded HTTP server's multipart/form-data boundary parser to cause the device to become fully unresponsive — dropping all management access and traffic forwarding during its self-recovery cycle.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.