CVE-2025-54400

Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `counts` request parameter for composing the `"ping -c <counts> <ipaddr> 2>&1 > %s &"` string.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226	Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2226

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:planet:wgr-500_firmware:1.3411b190912:*:*:*:*:*:*:*

cpe:2.3:h:planet:wgr-500:-:*:*:*:*:*:*:*

History

30 Sep 2026, 23:10

Type	Values Removed	Values Added
Summary		(es) Múltiples vulnerabilidades de desbordamiento de búfer basado en pila existen en la funcionalidad formPingCmd de Planet WGR-500 v1.3411b190912. Una serie de solicitudes HTTP especialmente diseñadas puede conducir a un desbordamiento de búfer basado en pila. Un atacante puede enviar una serie de solicitudes HTTP para activar estas vulnerabilidades. Este desbordamiento de búfer está relacionado con el parámetro de solicitud 'counts' para componer la cadena 'ping -c <counts> <ipaddr> 2>&1 > %s &'.

Information

Published : 2025-10-07 14:15

Updated : 2026-10-08 22:10

NVD link : CVE-2025-54400

Mitre link : CVE-2025-54400

CVE.ORG link : CVE-2025-54400

JSON object : View

Products Affected

planet

wgr-500
wgr-500_firmware

CWE

CWE-121

Stack-based Buffer Overflow

{"id": "CVE-2025-54400", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "talos-cna@cisco.com"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54400", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-07T14:39:09.773155Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "Planet", "product": "WGR-500", "versions": [{"status": "affected", "version": "v1.3411b190912"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-07T14:15:37.633", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2226", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2226", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-121"}]}], "descriptions": [{"lang": "en", "value": "Multiple stack-based buffer overflow vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to stack-based buffer overflow. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This buffer overflow is related to the `counts` request parameter for composing the `\"ping -c <counts> <ipaddr> 2>&1 > %s &\"` string."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de desbordamiento de b\u00fafer basado en pila existen en la funcionalidad formPingCmd de Planet WGR-500 v1.3411b190912. Una serie de solicitudes HTTP especialmente dise\u00f1adas puede conducir a un desbordamiento de b\u00fafer basado en pila. Un atacante puede enviar una serie de solicitudes HTTP para activar estas vulnerabilidades. Este desbordamiento de b\u00fafer est\u00e1 relacionado con el par\u00e1metro de solicitud 'counts' para componer la cadena 'ping -c <counts> <ipaddr> 2>&1 > %s &'."}], "lastModified": "2026-10-08T22:10:00.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:planet:wgr-500_firmware:1.3411b190912:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2595E4C-3CBF-44C8-B4E4-56498F94899E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:planet:wgr-500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD4C9C5C-B223-4AED-9210-E0ADA4150E0B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}