Opengear vulnerabilities

Products

• acm5000 console server 1
• ACM7000 1
• cm4000 console server 1
• CM7100 1
• im4004-5 console server 1
• im4200 console server 1
• IM7200 1
• img4000 console server 1
• kcs6000 rackside console server 1
• opengear 1
• opengear console server firmware 1

Latest Opengear CVEs

Newest publication first

1. CVE-2026-102212 Pre-Auth Heap Buffer Overflow in the Multipart Request

   Published 2026-10-31

   High·CVSS 8.4 EPSS 0.32%

   Heap-based buffer overflow in Opengear IM72XX, CM71XX, and ACM70XX firmware versions 4.8.0 through 5.5.2 on console server appliances allows an unauthenticated remote attacker to crash the index.cgi process via a crafted multipart/form-data POST request containing an overlong Con...

2. CVE-2019-14456 Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Ope...

   Published 2019-07-31

   Medium·CVSS 5.4 EPSS 0.65%

   Opengear console server firmware releases prior to 4.5.0 have a stored XSS vulnerability related to serial port logging. If a malicious user of an external system (connected to a serial port on an Opengear console server) sends crafted text to a serial port (that has logging enab...

3. CVE-2011-3997 Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

   Published 2011-11-09

   High·CVSS 7.5 EPSS 1.4%

   Opengear console servers with firmware before 2.2.1 allow remote attackers to bypass authentication, and modify settings or access connected equipment, via unspecified vectors.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.