CVE-2026-81943

PLANET IGS-5225-8P2T4S industrial managed switches (V1 and V2) ship with active debug functionality in the embedded software. An attacker with privileged (HIGH) local access can enable debug mode to execute arbitrary code on the underlying OS and gain root-level access . Affected firmware version...

CVE-2026-81943 PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

EUVD-2026-82987

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

CVE-2026-81942

The PLANET IGS-5225-8P2T4S industrial managed switch (V1 and V2) contains an OS command injection vulnerability in its web server . User-supplied input is passed to system() without sufficient filtering, enabling a remote authenticated attacker to execute arbitrary commands on the underlying OS a...

CVE-2026-81946: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access passwor...

CVE-2026-81944: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of...

CVE-2026-81945: Stack-based Buffer Overflow

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service o...

CVE-2026-81943: Active Debug Code

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying...

CVE-2026-81942: Improper Neutralization of Special Elements used in an OS Command

PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system without sufficient filtering, allowing a remote authenticated attacker to...

The vulnerability of the web server of the microprogrammed software for industrial-controlled switches PLANET IGS-5225-8P2T4S allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web server of the microprogrammed software for industrial-controlled switches PLANET IGS-5225-8P2T4S lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures or execute arbitrary code...

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches, related to the use of cryptographic algorithms containing defects, allows a hacker to obtain the device’s configuration file and restore the password to access the privileged mode.

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow an attacker to obtain the device’s configuration file and recover...

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial-controlled switches lies in the insufficient protection of operational data during code debugging. This allows a malicious actor to execute arbitrary code and gain increased privileges.

The vulnerability of the microprogrammed software of the PLANET IGS-5225-8P2T4S industrial control switches is related to insufficient protection of operational data during code debugging. Exploiting this vulnerability can allow attackers to execute arbitrary code and enhance their privileges...

The vulnerability of the web server of the microprogrammed software for industrial-controlled switches PLANET IGS-5225-8P2T4S allows a intruder to trigger a service failure or execute arbitrary code.

The vulnerability of the web server of the microprogrammed software for industrial-controlled switches PLANET IGS-5225-8P2T4S lies in the escape of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to cause service failures or execute arbitrary code...

The vulnerability of the web server of the microprogramming software for industrial-controlled switches PLANET IGS-5225-8P2T4S allows a hacker to execute arbitrary commands and increase their privileges.

The vulnerability of the web server of the microprogrammed software for industrial-controlled switches PLANET IGS-5225-8P2T4S is related to the absence of filtering for user-input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and increase thei...

CVE-2023-45204

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0009, Tecnomatix Plant Simulation V2302 All versions V2302.0003. The affected applications contain a type confusion vulnerability while parsing specially crafted IGS files. This could allow an attacker to...

Siemens Simcenter Femap IGS File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Simcenter Femap. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsin...

CVE-2025-40936

A vulnerability has been identified in PS/IGES Parasolid Translator Component All versions V29.0.258, Simcenter Femap All versions V2512.0003, Solid Edge All versions V226.00 Update 03. The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS file...

CVE-2025-40936

A vulnerability has been identified in PS/IGES Parasolid Translator Component All versions V29.0.258, Simcenter Femap All versions V2512.0003, Solid Edge All versions V226.00 Update 03. The affected applications contains an out of bounds read vulnerability while parsing specially crafted IGS file...