CVE-2026-77217
PLANET GS-4210-16P2S firmware before 3.441b260626 contains authenticated stack buffer overflow and null pointer dereference vulnerabilities in /cgi-bin/dispatcher.cgi. The web_radiusSrv*_post family of handlers copies the radKey, radKey_0, radDftParamKey, radName, and radIp POST parameters into fixed-size stack buffers without length validation, and additionally dereferences radName and radIp without verifying their presence in the request. A remote authenticated attacker can send crafted requests to crash the CGI process or web management service, resulting in denial of service.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 6.9
- CVSS vector
- CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
- EPSS probability
- 0.43%
- CWE
- CWE-121, CWE-476
- Published
- 2026-08-28
- Last modified
- 2026-09-01
Affected products
- PLANET Technology Corp. PLANET GS-4210-16P2S
- PLANET Technology Corp. PLANET GS-4210-16P2S V3
Weakness type
Related vulnerabilities
- CVE-2026-85384 — Authenticated Stack-Based Buffer Overflow in RE210 AC750 Configuration Import
- CVE-2026-83990 — Microsoft Graphics Component Elevation of Privilege Vulnerability
- CVE-2026-81953 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81388 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-81396 — Microsoft Excel Remote Code Execution Vulnerability
- CVE-2026-73006 — DirectWrite Remote Code Execution Vulnerability
- CVE-2026-69614 — Microsoft Office Access Remote Code Execution Vulnerability
- CVE-2026-69510 — Windows DHCP Server Remote Code Execution Vulnerability