CVE-2025-46275CWE-306

Planet Technology Network Products Missing Authentication for Critical Function

Critical · published April 24, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

🚨 A lack of authentication on WGS-80HPT-V2 and WGS-4215-8T2S means an attacker can create an admin account without breaking a sweat! 🔥 Think of it like a hotel where anyone can walk in and get a master key without even checking in — suddenly, the whole place is vulnerable! With this vulnerability, an attacker could gain complete control over the system, allowing them to change settings, access sensitive data, or even lock out legitimate users. This is a game-changer for any organization using these systems, as it essentially hands over the keys to the castle!

Put simply

Think of it like a hotel where anyone can walk in and get a master key without even checking in — suddenly, the whole place is vulnerable! The WGS-80HPT-V2 and WGS-4215-8T2S devices lack proper authentication checks, enabling malicious users to create admin accounts without needing any existing credentials. This oversight opens the door to unauthorized access and control.

What to do

With this vulnerability, an attacker could gain complete control over the system, allowing them to change settings, access sensitive data, or even lock out legitimate users. This is a game-changer for any organization using these systems, as it essentially hands over the keys to the castle! Immediately apply the latest firmware updates to patch this vulnerability. Review access logs for any suspicious activity and consider implementing additional security measures, like two-factor authentication, to safeguard against future threats. You can tackle this! Follow the steps to secure your systems and become the hero of your organization! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00564 · 46.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-04-24T22:58Z
EPSS history
Timeline
  • 24 APR 22:58Z
    Planet Technology Network Products Missing Authentication for Critical Function
    cvelistv5