CVE-2026-81944: falha de alta gravidade em PLANET IGS-5225-8P2T4S V1
PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.7epss 0.7%
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of service or potentially execute arbitrary code on the underlying operating system.
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
PLANET Technology Corp. · PLANET IGS-5225-8P2T4S V1PLANET Technology Corp. · PLANET IGS-5225-8P2T4S V2CVEs relacionadas — PLANET IGS-5225-8P2T4S V1
No mesmo produto, das mais perigosas para as menos.
CVE-2026-81942HIGHPLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web ServerEPSS 1.9%CVE-2026-81945HIGHPLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web ServerEPSS 0.6%CVE-2026-81943HIGHPLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCEEPSS 0.2%CVE-2026-81946MEDIUMPLANET IGS-5225-8P2T4S V1/V2 Weak Password Hashing via MD5 AlgorithmEPSS 0.2%