666 matches found
CVE-2025-9972 Planet Technology｜Industrial Cellular Gateway - OS Command Injection
Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...
CVE-2025-9972
Planet Technology’s Industrial Cellular Gateway models are affected by an OS Command Injection vulnerability (CVE-2025-9972). The CVSS reports a critical impact (NETWORK, NO privileges, no user interaction required) with high impact to confidentiality, integrity, and availability. The vulnerabili...
CVE-2025-9972 Planet Technology｜Industrial Cellular Gateway - OS Command Injection
Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device...
CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication
Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...
CVE-2025-9971
CVE-2025-9971 concerns Planet Technology’s Industrial Cellular Gateway, where a missing authentication vulnerability allows unauthenticated remote manipulation via a specific functionality. The connected sources describe the root cause as lack of authentication and indicate high impact on confide...
CVE-2025-9971 Planet Technology｜Industrial Cellular Gateway - Missing Authentication
Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality...
PT-2025-38125
Name of the Vulnerable Software and Affected Versions: Planet Technology Industrial Cellular Gateway affected versions not specified Description: Certain models of Industrial Cellular Gateway developed by Planet Technology are susceptible to a missing authentication issue. This allows...
Planet Industrial Cellular Gateway 安全漏洞
Planet Industrial Cellular Gateway is a gateway device from Planet Corporation of Taiwan, China. A security vulnerability exists in Planet Industrial Cellular Gateway that stems from a lack of authentication, which could allow an unauthenticated remote attacker to manipulate the device...
WordPress Planet Shakers Theme <= 1.0.7 - Local File Inclusion Vulnerability
Local File Inclusion Vulnerability discovered by Tran Nguyen Bao Khanh VCI - VNPT Cyber Immunity in WordPress Theme Planet Shakers versions = 1.0.7...
WordPress Planet Shakers Theme <= 1.0.7 is vulnerable to Local File Inclusion
Software Planet Shakers Type Theme Vulnerable versions = 1.0.7 Fixed in N/A OWASP Top 10 A3: Injection Classification Local File Inclusion CVE CVE-2025-26592 Patch priority High CVSS severity High 8.1 Developer Claim ownership PSID 6cfe6c05862f Credits Tran Nguyen Bao Khanh VCI - VNPT Cyber...
Planet FW-WGS-804HPT web_stp_globalSetting_post function buffer overflow vulnerability
Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the stpconfname parameter in the webstpglobalSettingpost function failing to correctly validate the length and size of the input data...
Planet FW-WGS-804HPT web_acl_mgmt_Rules_Apply_post Function Buffer Overflow Vulnerability
Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the ruleNamekey parameter in the webaclmgmtRulesApplypost function that fails to correctly validate the length of the input data, whi...
The vulnerability of the web_aaa_loginAuthlistEdit() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webaaaloginAuthlistEdit function in PLANET Technology’s microcontroller software is related to buffer overflow during the processing of the theauthName parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and...
Planet FW-WGS-804HPT web_radiusSrv_post function buffer overflow vulnerability
Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the failure of the radIpkey parameter in the webradiusSrvpost function to correctly validate the length of the input data, which can ...
Planet FW-WGS-804HPT web_sys_infoContact_post Function Buffer Overflow Vulnerability
Planet FW-WGS-804HPT is a wall mounted managed switch from China PLANET. The Planet FW-WGS-804HPT suffers from a buffer overflow vulnerability that originates from the websysinfoContactpost function failing to correctly validate the length of the input data, which can be exploited by an attacker ...
The vulnerability of the webACLBindEdit_post() function in PLANET Technology’s microcontroller software allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webACLBindEditPost function in PLANET Technology’s microprogramming devices is related to buffer overflows in the stack during the processing of the bindEditMACName parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality,...
The vulnerability of the web_radiusSrv_dftParam_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webRadiusSrvdftParampost function in the microprogramming software for PLANET Technology is related to buffer overflows in the stack during the processing of the radDftParamKey parameter. Exploiting this vulnerability could allow an attacker to compromise the...
The vulnerability of the web_acl_ipv4BasedAceAdd() function in PLANET Technology’s microprogrammed switching software allows a perpetrator to compromise the confidentiality and integrity of the protected information.
The vulnerability of the webaclipv4BasedAceAdd function in PLANET Technology’s microprogrammed switching software is related to buffer overflows in the stack when processing the ipv4Aclkey parameter. Exploiting this vulnerability can allow an attacker to compromise the confidentiality and integri...
The vulnerability of the web_tool_upgradeManager_post() function in the microprogramming software for PLANET Technology allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the webtoolupgradeManagerpost function in PLANET Technology’s microcontroller software is related to buffer overflow during the processing of the bytftpsrvip parameter. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
