PT-2026-146866
CVE-2026-109445
·
Published
2026-11-13
·
Updated
2026-11-13
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
PLANET GS-5220-8P2T2S (hardware version 3.0) versions prior to 3.2412b261008
Description
A stack-based buffer overflow occurs when the device processes an oversized
webstax auth HTTP Cookie value. This happens because the value is copied into a fixed-size stack buffer without proper length validation. An unauthenticated remote attacker can send a crafted HTTP request to overwrite the saved return address and corrupt stack memory, which may lead to memory corruption and a denial of service.Recommendations
Update to version 3.2412b261008.
Found an issue in the description? Have something to add? Feel free to write us 👾