CVE-2026-35081
Arbitrary process termination vulnerability in method ugw-logstop
In short
A flaw in the ugw-logstop method lets someone with basic user access stop any running process on the system by sending improper input. This could crash important services and disrupt how the system works.
Technical detail
The ugw-logstop method fails to validate user-supplied input before terminating processes, allowing an authenticated attacker to abuse the functionality to kill arbitrary processes. This requires user-level privileges and can result in denial of service or system instability by terminating critical services.
Summary generated and translated by AI from the official description.
The ugw-logstop method allows a remote attacker with user privileges to terminate arbitrary processes due to insufficient validation of user-supplied input.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N
Affected products
MBS · Double-A ProfibusMBS · Double-A x-linkMBS · Double-X CANMBS · Double-X DALIMBS · Double-X KNXMBS · Double-X LONMBS · Double-X M-BusMBS · Double-X PROFINETMBS · Double-X x-linkMBS · Single-AMBS · Single-XMBS · Triple-X KNX+DALIMBS · Triple-X KNX+LONMBS · Triple-X KNX+M-BusMBS · Triple-X PROFINET+DALIMBS · Triple-X PROFINET+KNXMBS · Triple-X PROFINET+LONMBS · Triple-X PROFINET+M-BusWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →