Missing Authentication Vulnerability in Planet Technology Industrial Cellular Gateway
CVE-2025-9971

9.3CRITICAL

Key Information:

Vendor

Planet Technology

Status
Icg-2510wg-lte (eu/us)
Icg-2510w-lte (eu/us)
Vendor
CVE Published:
17 September 2025

What is CVE-2025-9971?

Certain models of Industrial Cellular Gateway developed by Planet Technology possess a vulnerability that allows unauthenticated remote attackers to gain unauthorized access and manipulate the device through specific functionalities. This flaw could lead to severe security risks, enabling attackers to exploit the device without proper authentication protocols in place.

Affected Version(s)

ICG-2510W-LTE (EU/US) 0 <= 1.0_20240411

ICG-2510WG-LTE (EU/US) 0 <= 1.0-20240918

References

https://www.twcert.org.tw/tw/cp-132-10389-265a3-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-10390-7ce12-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-9971 : Missing Authentication Vulnerability in Planet Technology Industrial Cellular Gateway