PatchTheCVEplanet vulnerabilities
Recent CVEs affecting planet products. 23 tracked.
planet has 23 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 17. Most recent: 2025-10-07. Highest priority: CVE-2025-48826 (score 59/100).
- CVE-2025-48826 HIGH 8.8 MITIGATE A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912
- CVE-2025-54403 HIGH 8.8 MITIGATE Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b1909
- CVE-2025-54404 HIGH 8.8 MITIGATE Multiple OS command injection vulnerabilities exist in the swctrl functionality of Planet WGR-500 v1.3411b1909
- CVE-2025-54405 HIGH 8.8 MITIGATE Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411
- CVE-2025-54406 HIGH 8.8 MITIGATE Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411
- CVE-2025-54399 HIGH 8.8 MITIGATE Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500
- CVE-2025-54400 HIGH 8.8 MITIGATE Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500
- CVE-2025-54401 HIGH 8.8 MITIGATE Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500
- CVE-2025-54402 HIGH 8.8 MITIGATE Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500
- CVE-2025-44895 MEDIUM 6.5 MITIGATE FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ipv4Aclkey parameter in the web
- CVE-2025-44892 MEDIUM 6.5 MITIGATE FW-WGS-804HPT v1.305b241111 was discovered to contain a stack overflow via the ownekey parameter in the web_rm
- CVE-2024-8459 HIGH 7.2 UPGRADE UPGRADE Certain switch models from PLANET Technology store SNMPv3 users' passwords in plaintext within the configurati
- CVE-2024-8458 HIGH 8.8 UPGRADE UPGRADE Certain switch models from PLANET Technology have a web application that is vulnerable to Cross-Site Request F
- CVE-2024-8457 MEDIUM 4.8 UPGRADE UPGRADE Certain switch models from PLANET Technology have a web application that does not properly validate specific p
- CVE-2024-8456 CRITICAL 9.8 UPGRADE UPGRADE Certain switch models from PLANET Technology lack proper access control in firmware upload and download functi
- CVE-2024-8455 HIGH 8.1 UPGRADE UPGRADE The swctrl service is used to detect and remotely manage PLANET Technology devices
- CVE-2024-8454 MEDIUM 5.3 UPGRADE UPGRADE The swctrl service is used to detect and remotely manage PLANET Technology devices
- CVE-2024-8453 MEDIUM 4.9 UPGRADE UPGRADE Certain switch models from PLANET Technology use an insecure hashing function to hash user passwords without b
- CVE-2024-8452 HIGH 7.5 UPGRADE UPGRADE Certain switch models from PLANET Technology only support obsolete algorithms for authentication protocol and
- CVE-2024-8451 HIGH 7.5 UPGRADE UPGRADE Certain switch models from PLANET Technology have an SSH service that improperly handles insufficiently authen
- CVE-2024-8450 HIGH 8.6 UPGRADE UPGRADE Certain switch models from PLANET Technology have a Hard-coded community string in the SNMPv1 service, allowin
- CVE-2024-8449 MEDIUM 6.8 UPGRADE UPGRADE Certain switch models from PLANET Technology have a Hard-coded Credential in the password recovering functiona
- CVE-2024-8448 HIGH 8.8 UPGRADE UPGRADE Certain switch models from PLANET Technology have a hard-coded credential in the specific command-line interfa
FAQ
How do I fix planet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is planet being exploited right now?
None of the tracked planet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which planet CVE should I patch first?
CVE-2025-48826 currently ranks highest (59/100): A format string vulnerability exists in the formPingCmd functionality of Planet WGR-500 v1.3411b190912.