PT-2026-33693 · Unknown+1 · Amc Manager+1

Published 2026-04-20 · Updated 2026-05-02 · CVE-2026-32955

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SD-330AC (affected versions not specified) AMC Manager (affected versions not specified)

Description SD-330AC and AMC Manager contain a stack-based buffer overflow in the redirect handler. This issue occurs during the processing of redirect URLs, specifically via the '/redirect' endpoint using the url parameter. An unauthenticated attacker can exploit this to execute arbitrary code on the device.

Recommendations Replace the use of the strcpy() function with strncpy() in the redirect handler to prevent buffer overflows.

Fix

RCE

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

CVE-2026-32955

Affected Products

Amc Manager

Sd-330Ac

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-32955 · Security Note
• https://silex.jp/support/security-advisories/2026-001 · Vendor Advisory
• https://silex.jp/support/security-advisories/en/2026-001 · Vendor Advisory
• https://twitter.com/SecurityAr58409/status/2047258544727028050 · Twitter Post
• https://jvn.jp/en/vu/JVNVU94271449 · Note
• https://twitter.com/VulmonFeeds/status/2046123808659021916 · Twitter Post
• https://twitter.com/HugoValters/status/2050658079709245833 · Twitter Post
• https://twitter.com/vuldb/status/2046093398319472682 · Twitter Post