CVE-2025-54402
Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `submit-url` and `ipaddr` request parameters combined.
Published:Oct 7, 2025
Last Modified:Nov 3, 2025
EPS:Oct 7, 2025
EPSS Score:0.00047
CVSS Score:8.8
Affected Products
Vendor
Product
Action
Vendor
Planet
Product
Wgr-500
Planet
Wgr-500
Vendor
Planet
Product
Wgr-500 Firmware
Planet
Wgr-500 Firmware
Common Weakness Enumeration
Common Attack Pattern Enumeration and Classification (CAPEC)
No CAPEC recorded yet
Related CVEs
Common Vulnerability Scoring System
Attack Vector
Network
Adjacent
Local
Physical
Privileges Required
None
Low
High
User Interaction
None
Required
Scope
Unchanged
Changed
Confidentiality
None
Low
High
Integrity
None
Low
High
Availability
None
Low
High
