Skip to content
OpenAdvisories
High · 8.8 CVE-2026-35085 EUVD-2026-34081GHSA-57rp-874r-xvf4

Stack buffer overflow in method gdv-serverconfig

Published Jun 3, 2026 · Updated Jul 3, 2026 · Assigned by CERTVDE

Vendor: MBS Product: Double-A Profibus Product: Double-A x-link Product: Double-X CAN Product: Double-X DALI Product: Double-X KNX Product: Double-X LON Product: Double-X M-Bus Product: Double-X PROFINET Product: Double-X x-link Product: Single-A Product: Single-X Product: Triple-X KNX+DALI Product: Triple-X KNX+LON Product: Triple-X KNX+M-Bus Product: Triple-X PROFINET+DALI Product: Triple-X PROFINET+KNX Product: Triple-X PROFINET+LON Product: Triple-X PROFINET+M-Bus

Description

A remote attacker with user privileges can exploit a stack buffer overflow in gdv-serverconfig to gain full system access as root.

Affected products

VendorProductAffectedFixed
MBS Single-A V1_00_00 – < V6_00_07 V6_00_07
MBS Double-A Profibus V1_00_00 – < V6_00_07 V6_00_07
MBS Double-A x-link V1_00_00 – < V6_00_07 V6_00_07
MBS Single-X V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X CAN V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X DALI V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X KNX V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X LON V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X M-Bus V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X PROFINET V1_00_00 – < V6_00_07 V6_00_07
MBS Double-X x-link V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X KNX+DALI V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X KNX+LON V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X KNX+M-Bus V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X PROFINET+DALI V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X PROFINET+KNX V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X PROFINET+LON V1_00_00 – < V6_00_07 V6_00_07
MBS Triple-X PROFINET+M-Bus V1_00_00 – < V6_00_07 V6_00_07

Advisories 1

References