Skip to content
OpenAdvisories
Critical ICSA-24-340-02 3 CVEs

Planet Technology Planet WGS-804HPT

Published Dec 5, 2024 · Updated Dec 5, 2024

Vendor: PLANET Technology Product: Planet WGS-804HPT

Summary

Successful exploitation of these vulnerabilities could result in remote code execution.

Vulnerabilities 3

  • Critical 9.8
    CVE-2024-48871

    Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

    The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execu…

    PLANET Technology Planet WGS-804HPT
  • Critical 9.8
    CVE-2024-52320

    Planet Technology Planet WGS-804HPT Command Injection

    The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.

    PLANET Technology Planet WGS-804HPT
  • Medium 5.3
    CVE-2024-52558

    Planet Technology Planet WGS-804HPT Integer Underflow

    The affected product is vulnerable to an integer underflow. An unauthenticated attacker could send a malformed HTTP request, which could allow the attacker to crash the program.

    PLANET Technology Planet WGS-804HPT

Revision history

  1. #1

    Initial Publication

References