PT-2026-146866

CVE-2026-109445

·

Published

2026-11-13

·

Updated

2026-11-13

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions PLANET GS-5220-8P2T2S (hardware version 3.0) versions prior to 3.2412b261008
Description A stack-based buffer overflow occurs when the device processes an oversized webstax auth HTTP Cookie value. This happens because the value is copied into a fixed-size stack buffer without proper length validation. An unauthenticated remote attacker can send a crafted HTTP request to overwrite the saved return address and corrupt stack memory, which may lead to memory corruption and a denial of service.
Recommendations Update to version 3.2412b261008.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾