Approved changes feed: RSS · Atom

cpe:2.3:a:planet_technology_corp.:planet_igs-5225-8p2t4s_v2:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPlanet Technology Corp. (9b95c5d7-592a-5848-b856-61d2cd3150ef)
ProductPlanet Igs 5225 8P2T4S V2 (580006d1-7811-518d-b21a-2f1ceae613fd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-81945 vulnerable 2026-10-13 12:28:37.160967 PLANET IGS-5225-8P2T4S V1/V2 Admin Stack-Based Buffer Overflow via Web Server
MEDIUM (6.6)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote administrator to cause a denial of service or potentially execute arbitrary code on the underlying operating system.
Published: 2026-09-18T15:19:13.844Z
Updated: 2026-09-26T13:29:55.247Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81944 vulnerable 2026-10-13 12:28:36.956493 PLANET IGS-5225-8P2T4S V1/V2 Stack-Based Buffer Overflow via Web Server
HIGH (7.5)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain a stack-based buffer overflow in the web server. Insufficient bounds checking on data copied into a stack buffer allows a remote authenticated attacker to cause a denial of service or potentially execute arbitrary code on the underlying operating system.
Published: 2026-09-18T15:18:22.640Z
Updated: 2026-09-18T17:53:38.527Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81946 vulnerable 2026-10-13 12:28:36.794262 PLANET IGS-5225-8P2T4S V1/V2 Weak Password Hashing via MD5 Algorithm
MEDIUM (4.4)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 use MD5-based password hashing, a cryptographic algorithm with known weaknesses. An attacker who obtains the device configuration file can recover the privileged-mode access password.
Published: 2026-09-18T15:19:56.570Z
Updated: 2026-09-22T14:41:11.110Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81942 vulnerable 2026-10-13 12:28:36.771212 PLANET IGS-5225-8P2T4S V1/V2 OS Command Injection via Web Server
HIGH (8.8)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain an OS command injection vulnerability in the web server. User-supplied input is passed to system() without sufficient filtering, allowing a remote authenticated attacker to execute arbitrary commands on the underlying operating system and escalate privileges to root.
Published: 2026-09-18T15:13:21.358Z
Updated: 2026-09-21T20:50:57.257Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-81943 vulnerable 2026-10-13 12:28:36.712122 PLANET IGS-5225-8P2T4S V1/V2 Debug Mode RCE
MEDIUM (6.7)
PLANET IGS-5225-8P2T4S industrial managed switch V1 and V2 firmware versions before 1.2412b260707 and 2.2412b260519 contain active debug functionality in the embedded software. An attacker with privileged access to the device can enable this debug mode to execute arbitrary code on the underlying operating system and gain root-level access.
Published: 2026-09-18T15:17:26.368Z
Updated: 2026-09-18T15:41:08.524Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.