Lucene search

CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection

🗓️ 06 Dec 2024 17:44:21Reported by icscertType

Planet Technology WGS-804HPT is vulnerable to command injection via malicious HTTP requests.

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2024-52320 Planet Technology Planet WGS-804HPT Command Injection	6 Dec 202417:21	–	cvelist
NVD	CVE-2024-52320	6 Dec 202418:15	–	nvd
CVE	CVE-2024-52320	6 Dec 202418:15	–	cve

[
  {
    "cpes": [
      "cpe:2.3:o:planet_technology_corp:wgs-804hpt_firmware:1.305b210531:*:*:*:*:*:*:*"
    ],
    "vendor": "planet_technology_corp",
    "product": "wgs-804hpt_firmware",
    "versions": [
      {
        "status": "affected",
        "version": "1.305b210531",
        "lessThan": "2.320.x",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]

Source	Link
planet	www.planet.com.tw/en/support/downloads
cisa	www.cisa.gov/news-events/ics-advisories/icsa-24-340-02

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

06 Dec 2024 17:21Current

8.4High risk

Vulners AI Score8.4

CVSS39.8

CVSS49.3

EPSS0.0004

SSVC

CWE-78