Skip to content
OpenAdvisories
Critical ICSA-25-114-06 5 CVEs

Planet Technology Network Products

Published Apr 24, 2025 · Updated May 6, 2025 · Revision 2

Summary

Successful exploitation of these vulnerabilities could allow an attacker to read or manipulate device data, gain administrative privileges, or alter database entries.

Vulnerabilities 5

  • Critical 9.8

    Planet Technology Network Products Use of Hard-coded Credentials

    UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to gain administrative privileges to all UNI-NMS managed devices.

  • Critical 9.8

    Planet Technology Network Products Use of Hard-coded Credentials

    UNI-NMS-Lite uses hard-coded credentials that could allow an unauthenticated attacker to read, manipulate and create entries in the managed database.

  • Critical 9.8

    Planet Technology Network Products Missing Authentication for Critical Function

    WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials.

  • Critical 9.1
    CVE-2025-46271 Public exploit

    Planet Technology Network Products OS Command Injection

    UNI-NMS-Lite is vulnerable to a command injection attack that could allow an unauthenticated attacker to read or manipulate device data.

  • Critical 9.1

    Planet Technology Network Products OS Command Injection

    WGS-80HPT-V2 and WGS-4215-8T2S are vulnerable to a command injection attack that could allow an unauthenticated attacker to execute OS commands on the host system.

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Initial Publication

References