A vulnerability marked as critical has been reported in silex SD-330AC and AMC Manager . Affected by this issue is some unknown functionality of the component Redirect URL Handler . The manipulation leads to stack-based buffer overflow. This vulnerability is documented as CVE-2026-32955 . The attack can be initiated remotely. There is not any exploit available. It is suggested to upgrade the affected component.
Full text archived locally
✦ AI Summary· Claude Sonnet
VDB-358272 · CVE-2026-32955 · GCVE-0-2026-32955
SILEX SD-330AC/AMC MANAGER REDIRECT URL STACK-BASED OVERFLOW
HISTORYDIFFRELATEJSONXMLCTI
CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
8.6 $0-$5k 4.87
Summaryinfo
A vulnerability described as critical has been identified in silex SD-330AC and AMC Manager. This affects an unknown part of the component Redirect URL Handler. The manipulation results in stack-based overflow. This vulnerability is reported as CVE-2026-32955. The attack can be launched remotely. No exploit exists. Upgrading the affected component is recommended.
Detailsinfo
A vulnerability classified as critical has been found in silex SD-330AC and AMC Manager (unknown version). Affected is an unknown code block of the component Redirect URL Handler. The manipulation with an unknown input leads to a stack-based overflow vulnerability. CWE is classifying the issue as CWE-121. A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function). This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:
SD-330AC and AMC Manager provided by silex technology, Inc. contain a stack-based buffer overflow vulnerability in processing the redirect URLs. Arbitrary code may be executed on the device.
The advisory is shared for download at silex.jp. This vulnerability is traded as CVE-2026-32955 since 03/17/2026. The exploitability is told to be easy. It is possible to launch the attack remotely. There are neither technical details nor an exploit publicly available.
Upgrading eliminates this vulnerability.
Productinfo
Vendor
silex
Name
AMC Manager
SD-330AC
CPE 2.3info
🔒
🔒
CPE 2.2info
🔒
🔒
CVSSv4info
VulDB Vector: 🔒
VulDB Reliability: 🔍
CNA CVSS-B Score: 🔒
CNA CVSS-BT Score: 🔒
CNA Vector: 🔒
CVSSv3info
VulDB Meta Base Score: 8.8
VulDB Meta Temp Score: 8.6
VulDB Base Score: 8.8
VulDB Temp Score: 8.4
VulDB Vector: 🔒
VulDB Reliability: 🔍
CNA Base Score: 8.8
CNA Vector (jpcert): 🔒
CVSSv2info
Vector Complexity Authentication Confidentiality Integrity Availability
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
Unlock Unlock Unlock Unlock Unlock Unlock
VulDB Base Score: 🔒
VulDB Temp Score: 🔒
VulDB Reliability: 🔍
Exploitinginfo
Class: Stack-based overflow
CWE: CWE-121 / CWE-119
CAPEC: 🔒
ATT&CK: 🔒
Physical: No
Local: No
Remote: Yes
Availability: 🔒
Status: Not defined
Price Prediction: 🔍
Current Price Estimation: 🔒
0-Day Unlock Unlock Unlock Unlock
Today Unlock Unlock Unlock Unlock
Threat Intelligenceinfo
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍
Countermeasuresinfo
Recommended: Upgrade
Status: 🔍
0-Day Time: 🔒
Timelineinfo
03/17/2026 CVE reserved
04/20/2026 +33 days Advisory disclosed
04/20/2026 +0 days VulDB entry created
04/20/2026 +0 days VulDB entry last update
Sourcesinfo
Advisory: silex.jp
Status: Confirmed
CVE: CVE-2026-32955 (🔒)
GCVE (CVE): GCVE-0-2026-32955
GCVE (VulDB): GCVE-100-358272
Entryinfo
Created: 04/20/2026 06:59
Changes: 04/20/2026 06:59 (74)
Complete: 🔍
Cache ID: 99:911:101
Discussion
No comments yet. Languages: en.
Please log in to comment.
◂ PreviousOverviewNext ▸