Vendors › Savannah

Savannah security advisories

1 CISA ICS advisory for Savannah in the last tracking window, 0 flagged as relevant to oil & gas. Newest first.

Critical 9.8 ICSA-26-279-02 · Oct 6, 2026 · Savannah

Savannah lwIP SMTP client

CISA reports 1 vulnerability in Savannah lwIP SMTP client. Weakness type: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'). Successful exploitation of this vulnerability could crash the device being accessed; a buffer overflow condition may allow remote code execution. Highest CVSS v3 score: 9.8 (…

What to do: Act now: xchglabs reports that the vulnerability was fixed and released in the following patch: patch_125_smtp_txbuf.diff . This is available as available as git commit (614420f82c8729d070e01464c0dddb3c9525c772)