Read the docs
TI-2026-52782 Aliases CVE-2026-75124GHSA-fx37-w2g6-gg44

PLANET GS-4210-16P2S V3 Memory Corruption via dispatcher.cgi _readHttpParam

Priority MEDIUM 45CWE-120Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-120 and the CVSS impact.

Summary

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_query_string to process attacker-controlled data into a fixed-size stack buffer. An unauthenticated remote attacker can send an oversized GET request to dispatcher.cgi to cause denial of service of the web management interface and potentially trigger memory corruption.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00707 53rd percentileScored 2026-11-07
Fix Fixed PLANET GS-4210-16P2S V3 (PLANET Technology Corp.): 3.441b260626

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
Yes
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
PLANET Technology Corp.PLANET GS-4210-16P2S V3before 3.441b2606263.441b260626Patch availableCNA
  • PLANET GS-4210-16P2S V3 VendorPLANET Technology Corp. Affected before 3.441b260626 Fixed in 3.441b260626 Patch available CNA

Remediation

  • Fix · CNA PLANET GS-4210-16P2S V3 (PLANET Technology Corp.) Fixed in 3.441b260626

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    PLANET GS-4210-16P2S V3 — planet.com.tw/en/support/security-advisory/10

    8 records Highest priority Priority MEDIUM 4 MEDIUM, 4 LOW

    Other records, highest priority first

    • TI-2026-52781 PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_smtp_test_postPriority MEDIUM 42
    • TI-2026-52779 PLANET GS-4210-16P2S V3 Command Injection via dispatcher.cgi web_vlan_membership_edit_dialog_postPriority MEDIUM 42
    • TI-2026-52780 PLANET GS-4210-16P2S V3 Command Injection via httpuploadcert.cgiPriority MEDIUM 41
    Show all 8 records → Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-75124
  2. 2026-10-03 Alias added: GHSA-fx37-w2g6-gg44

References

Patch 1

  • TI-2024-34993 Planet Technology Planet WGS-804HPT Command Injection CVSS 4.0CRITICAL 9.3
  • TI-2025-29023 Planet Technology Network Products OS Command Injection CVSS 4.0CRITICAL 9.3
  • TI-2025-09152 Planet Technology｜Industrial Cellular Gateway - OS Command Injection CVSS 4.0CRITICAL 9.3
  • TI-2025-29024 Planet Technology Network Products OS Command Injection CVSS 4.0CRITICAL 9.3
  • TI-2024-32571 Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow CVSS 4.0CRITICAL 9.3
  • TI-2024-07838 PLANET Technology switch devices - Missing Authentication for multiple HTTP routes CVSS 3.1CRITICAL 9.8
See all 37 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences