PLANET GS-4210-16P2S V3 vulnerabilities
4 known vulnerabilities in PLANET GS-4210-16P2S V3 from PLANET Technology. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.5 High severity
PLANET GS-4210-16P2S V3: Buffer Copy without Checking Size of Input
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, all
- 7.2 High severity
PLANET GS-4210-16P2S V3: Improper Neutralization of Special Elements used in an OS Command
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_smtp_test_post handler incorporates a caller-supplied SMTP server value directly into a shell command without
- 7.2 High severity
PLANET GS-4210-16P2S V3: Improper Neutralization of Special Elements used in an OS Command
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/httpuploadcert.cgi. The certificate password field in a certificate upload request is incorporated into a shell command without saniti
- 7.2 High severity
PLANET GS-4210-16P2S V3: Improper Neutralization of Special Elements used in an OS Command
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated OS command injection vulnerability in /cgi-bin/dispatcher.cgi. The web_vlan_membership_edit_dialog_post handler incorporates the memberTags POST parameter into a shell command witho