CVE-2025-54405

Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `ipaddr` request parameter.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2025-2229	Exploit Third Party Advisory
https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2229

Configurations

Configuration 1 (hide)

AND

cpe:2.3:o:planet:wgr-500_firmware:1.3411b190912:*:*:*:*:*:*:*

cpe:2.3:h:planet:wgr-500:-:*:*:*:*:*:*:*

History

08 Oct 2026, 22:10

Type	Values Removed	Values Added
Summary		(es) Múltiples vulnerabilidades de inyección de comandos del sistema operativo existen en la funcionalidad formPingCmd de Planet WGR-500 v1.3411b190912. Una serie de solicitudes HTTP especialmente diseñadas puede conducir a la ejecución arbitraria de comandos. Un atacante puede enviar una serie de solicitudes HTTP para activar estas vulnerabilidades. Esta inyección de comandos está relacionada con el parámetro de solicitud 'ipaddr'.

Information

Published : 2025-10-07 14:15

Updated : 2026-10-08 22:10

NVD link : CVE-2025-54405

Mitre link : CVE-2025-54405

CVE.ORG link : CVE-2025-54405

JSON object : View

Products Affected

planet

wgr-500
wgr-500_firmware

CWE

CWE-78

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

{"id": "CVE-2025-54405", "cveTags": [{"tags": ["unsupported-when-assigned"], "sourceIdentifier": "talos-cna@cisco.com"}], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-54405", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-07T14:33:20.317238Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "talos-cna@cisco.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "affected": [{"source": "talos-cna@cisco.com", "affectedData": [{"vendor": "Planet", "product": "WGR-500", "versions": [{"status": "affected", "version": "v1.3411b190912"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-07T14:15:38.483", "references": [{"url": "https://talosintelligence.com/vulnerability_reports/TALOS-2025-2229", "tags": ["Exploit", "Third Party Advisory"], "source": "talos-cna@cisco.com"}, {"url": "https://www.talosintelligence.com/vulnerability_reports/TALOS-2025-2229", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "talos-cna@cisco.com", "description": [{"lang": "en", "value": "CWE-78"}]}], "descriptions": [{"lang": "en", "value": "Multiple OS command injection vulnerabilities exist in the formPingCmd functionality of Planet WGR-500 v1.3411b190912. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This command injection is related to the `ipaddr` request parameter."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de inyecci\u00f3n de comandos del sistema operativo existen en la funcionalidad formPingCmd de Planet WGR-500 v1.3411b190912. Una serie de solicitudes HTTP especialmente dise\u00f1adas puede conducir a la ejecuci\u00f3n arbitraria de comandos. Un atacante puede enviar una serie de solicitudes HTTP para activar estas vulnerabilidades. Esta inyecci\u00f3n de comandos est\u00e1 relacionada con el par\u00e1metro de solicitud 'ipaddr'."}], "lastModified": "2026-10-08T22:10:00.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:planet:wgr-500_firmware:1.3411b190912:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2595E4C-3CBF-44C8-B4E4-56498F94899E"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:planet:wgr-500:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "BD4C9C5C-B223-4AED-9210-E0ADA4150E0B"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "talos-cna@cisco.com"}