Skip to content
fr Sign in
5.3 Medium

CVE-2026-89208 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic…

Description

A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic R20-11 (All versions < V2303), Desigo PXC00-E.D (All versions >= V2.3), Desigo PXC00-U (All versions >= V2.3), Desigo PXC001-E.D (All versions >= V2.3), Desigo PXC100-E.D (All versions >= V2.3), Desigo PXC12-E.D (All versions >= V2.3), Desigo PXC128-U (All versions >= V2.3), Desigo PXC200-E.D (All versions >= V2.3), Desigo PXC22-E.D (All versions >= V2.3), Desigo PXC22.1-E.D (All versions >= V2.3), Desigo PXC36.1-E.D (All versions >= V2.3), Desigo PXC50-E.D (All versions >= V2.3), Desigo PXC64-U (All versions >= V2.3), Desigo PXM20-E (All versions >= V2.3). The affected product does not properly validate input bounds before accessing packet data. This could allow an unauthenticated remote attacker to trigger memory reads outside the intended packet boundaries.

Affected products and versions

Product Affected versions Fixed in
Capital Embedded AR Classic 431-422 Versions not published
Capital Embedded AR Classic R20-11 2303 earliest → < 2303 2303
Desigo PXC00-E.D 2.3 2.3 → latest No fix stated
Desigo PXC00-U 2.3 2.3 → latest No fix stated
Desigo PXC001-E.D 2.3 2.3 → latest No fix stated
Desigo PXC100-E.D 2.3 2.3 → latest No fix stated
Desigo PXC12-E.D 2.3 2.3 → latest No fix stated
Desigo PXC128-U 2.3 2.3 → latest No fix stated
Desigo PXC200-E.D 2.3 2.3 → latest No fix stated
Show the 6 other branches
Product Affected versions Fixed in
Desigo PXC22-E.D 2.3 2.3 → latest No fix stated
Desigo PXC22.1-E.D 2.3 2.3 → latest No fix stated
Desigo PXC36.1-E.D 2.3 2.3 → latest No fix stated
Desigo PXC50-E.D 2.3 2.3 → latest No fix stated
Desigo PXC64-U 2.3 2.3 → latest No fix stated
Desigo PXM20-E 2.3 2.3 → latest No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Capital Embedded AR Classic 431-422

The 12 CVEs of Capital Embedded AR Classic 431-422 →
CVE-2021-31890 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 7.5 High CVE-2021-31889 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 7.5 High CVE-2021-31883 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 7.1 High CVE-2021-31882 A vulnerability has been identified in Capital Embedded AR Classic 431-422 (All versions), Capital Embedded AR Classic… 6.5 Medium
Track this CVE