Stack-Based Buffer Overflow in PLANET IGS-5225-8P2T4S Managed Switch
CVE-2026-81945

7.5HIGH

Key Information:

Vendor

Planet Technology Corp.

Status
Planet Igs-5225-8p2t4s V1
Planet Igs-5225-8p2t4s V2
Vendor
CVE Published:
18 September 2026

What is CVE-2026-81945?

The PLANET IGS-5225-8P2T4S managed switch is affected by a stack-based buffer overflow vulnerability within its web server due to inadequate bounds checking during data processing. This flaw can allow remote administrators to exploit the system, potentially resulting in a denial of service or allowing the execution of arbitrary code on the device's operating system. Users are urged to apply the necessary firmware updates as prescribed in the vendor's advisory to mitigate the risk.

Affected Version(s)

PLANET IGS-5225-8P2T4S V1 0 < 1.2412b260707

PLANET IGS-5225-8P2T4S V2 0

References

https://www.planet.com.tw/en/support/security-advisory/11
vendor-advisorypatch
https://www.vulncheck.com/advisories/planet-igs-5225-8p2t...
third-party-advisory

CVSS V4

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Ivan Kurnakov, Vladimir Nazarov, Ilya Bubliy, Iliya Rogachev, Arseny Grigorev, Ivan Tarakanov, Aleksey Karimov (Positive Technologies)
Maksim Gruzin
.