PT-2024-10296 · Planet Technology+1 · Planet Wgs-804Hpt+2

Tomer Goldschmidt · Published 2024-11-15 · Updated 2025-01-20 · CVE-2024-48871

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

The affected product is susceptible to a stack-based buffer overflow, which can be triggered by an unauthenticated attacker sending a malicious HTTP request. The webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution. An exploit for this issue is available, with more information accessible at the provided links: https://t.co/vmA5nU15rh, https://t.co/KLXSw5zYBS, and https://t.co/Gud8m29Hdc. #cybersecurity #bufferoverflow #remotecodeexecution #webserver #stackbasedbufferoverflow

Fix

Stack Overflow

Weakness Enumeration

CWE-121

Related Identifiers

BDU:2025-00721

CVE-2024-48871

Affected Products

Planet Wgs-804Hpt

Wgs-804Hpt

Wgs-804Hpt Firmware

References · 14

• https://bdu.fstec.ru/vul/2025-00721 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-48871 · Security Note
• https://planet.com.tw/en/support/downloads?method=keyword&keyword=v1.305b241111 · Note
• https://twitter.com/TweetThreatNews/status/1880279513239585043 · Twitter Post
• https://twitter.com/TheHackersNews/status/1880256207426056615 · Twitter Post
• https://twitter.com/IT_news_for_all/status/1880256458933047784 · Twitter Post
• https://planet.com.tw/en/support/downloads?method=keyword&keyword=v1.305b241111 · Note
• https://twitter.com/CveFindCom/status/1865086851486281974 · Twitter Post
• https://t.me/thehackernews/6188 · Telegram Post
• https://cisa.gov/news-events/ics-advisories/icsa-24-340-02 · Note
• https://t.me/cvedetector/12265 · Telegram Post
• https://t.me/true_secator/6636 · Telegram Post
• https://twitter.com/SamTechwest/status/1881213024780128376 · Twitter Post
• https://twitter.com/CVEnew/status/1865091438184436077 · Twitter Post