CVE-2025-54404

Talos reports CVE-2025-54404 affecting Planet WGR-500 v1.3411b190912. The flaw resides in the swctrl service, which over UDP processes a PLANETut message; when the 0x90 (CHANGE_SETTINGS) path is taken, attacker-controlled fields (notably new_device_name) are incorporated into a shell command (fla...