CVE-2025-54403

Planet WGR-500 v1.3411b190912 has multiple OS command injection flaws in the swctrl service. A UDP-based protocol accepts commands with a header containing PLANETut and a 0x90 change settings path, where attacker-supplied, nibble-decoded inputs are used to build shell commands via system(). The v...