Stack-Based Buffer Overflow in Planet WGR-500 Router

CVE-2025-54399

What is CVE-2025-54399?

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of the Planet WGR-500 router. By sending a specially crafted series of HTTP requests, an attacker can exploit these vulnerabilities, specifically targeting the ipaddr request parameter to manipulate the command string that executes ping commands. This can lead to potential execution of arbitrary code, making systems vulnerable to further exploitation.

References