Planet vulnerabilities
We track 21 vulnerabilities in Planet products across 7 products. 21 are rated high or critical, and none are known to be exploited. The most recent was published on October 7, 2025.
Latest Planet vulnerabilities
- 8.8 High severity
WGR-500: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigge
- 8.8 High severity
WGR-500: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigge
- 8.8 High severity
WGR-500: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabiliti
- 8.8 High severity
WGR-500: Improper Neutralization of Special Elements used in an OS Command
Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b190912. A specially crafted network request can lead to arbitrary command execution. An attacker can send a network request to trigger these vulnerabiliti
- 8.8 High severity
WGR-500: Stack-based Buffer Overflow
Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to
- 8.8 High severity
WGR-500: Stack-based Buffer Overflow
Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to
- 8.8 High severity
WGR-500: Stack-based Buffer Overflow
Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to
- 8.8 High severity
WGR-500: Stack-based Buffer Overflow
Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to
- 8.8 High severity
WGR-500: Use of Externally-Controlled Format String
A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to memory corruption. An attacker can send a series of HTTP requests to trigger this vulnerability.
- 9.8 Critical severity
Wgs-804hpt Firmware: Stack-based Buffer Overflow
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the byruleEditName parameter in the web_acl_mgmt_Rules_Edit_postcontains function.
- 9.8 Critical severity
Wgs-804hpt Firmware: Stack-based Buffer Overflow
FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the remote_ip parameter in the web_snmpv3_remote_engineId_add_post function.
- 8.8 High severity
GS-4210-24PL4C hardware 2.0: Cross-Site Request Forgery
Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request Forgery (CSRF). An unauthenticated remote attacker can trick a user into visiting a malicious website, allowing the attacker to impersonate the user an
- 9.8 Critical severity
GS-4210-24PL4C hardware 2.0: Missing Authentication for Critical Functionality
Certain switch models from PLANET Technology lack proper access control in firmware upload and download functionality, allowing unauthenticated remote attackers to download and upload firmware and system configurations, ultimately gaining full control of the d
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Uncontrolled Resource Consumption
The swctrl service is used to detect and remotely manage PLANET Technology devices. Certain switch models have a Denial-of-Service vulnerability in the swctrl service, allowing unauthenticated remote attackers to send crafted packets that can crash the service
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Use of a Broken or Risky Cryptographic Algorithm
Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and encryption protocol in the SNMPv3 service, allowing attackers to obtain plaintext SNMPv3 credentials potentially.
- 7.5 High severity
GS-4210-24PL4C hardware 2.0: Improper Handling of Insufficient Permissions or Privileges
Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authenticated connection requests, allowing unauthorized remote attackers to exploit this weakness to occupy connection slots and prevent legitimate users f
- 9.8 Critical severity
GS-4210-24PL4C hardware 2.0: Use of Hard-coded Credentials
Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowing unauthorized remote attackers to use this community string to access the SNMPv1 service with read-write privileges.
- 8.8 High severity
GS-4210-24PL4C hardware 2.0: Use of Hard-coded Credentials
Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interface, allowing remote attackers with regular privilege to log in with this credential and obtain a Linux root shell.
- 7.1 High severity
IGS-4215-16T2S: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to trick some authenticated users into performing actions in their session, such as adding or up
- 7.7 High severity
IGS-4215-16T2S: Exposure of Sensitive Information to an Unauthorized Actor
Information exposure vulnerability in Planet IGS-4215-16T2S, affecting firmware version 1.305b210528. This vulnerability could allow a remote attacker to access some administrative resources due to lack of proper management of the Switch web interface.
- 9.8 Critical severity
Wdrt-1800ax Firmware: Improper Authentication
An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie.