PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting PLANET Technology Corp. PLANET IGS-5225-8P2T4S V2: 5 record(s), with affected versions and fixes.
CVE-2026-81946
Medium · 4.4
CWE-121 Sep 18, 2026
PLANET IGS-5225-8P2T4S V1/V2 Weak Password Hashing via MD5 Algorithm
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.
CVE-2026-81945
Medium · 6.6
CWE-121 Sep 18, 2026
PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or potentially execute arbitrary code on the underlying operating system.
CVE-2026-81944
High · 7.5
CWE-121 Sep 18, 2026
PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of service or potentially execute arbitrary code on the underlying operating system.
CVE-2026-81943
Medium · 6.7
CWE-489 Sep 18, 2026
PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying operating system and gain root-level access.
CVE-2026-81942
High · 8.8
CWE-78 Sep 18, 2026
PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.