CVE-2025-9971CWE-306

Planet Technology|Industrial Cellular Gateway - Missing Authentication

Critical · published September 17, 2025

CVSS v4.0
9.3
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

🚨 A critical missing authentication flaw in certain models of Industrial Cellular Gateways could let unauthorized attackers remotely take control! 🔥 Think of it as a shipping dock that allows anyone to walk in and start rerouting packages without showing any ID — a complete oversight in security that can lead to chaos. If exploited, an attacker could manipulate the device settings at will, potentially disrupting operations and causing significant damage. This vulnerability could lead to unauthorized access to sensitive data and critical infrastructure, resulting in devastating consequences for businesses relying on these gateways.

Put simply

Think of it as a shipping dock that allows anyone to walk in and start rerouting packages without showing any ID — a complete oversight in security that can lead to chaos. This vulnerability allows unauthenticated remote attackers to manipulate the Industrial Cellular Gateway due to a lack of proper authentication checks in a specific functionality.

What to do

If exploited, an attacker could manipulate the device settings at will, potentially disrupting operations and causing significant damage. This vulnerability could lead to unauthorized access to sensitive data and critical infrastructure, resulting in devastating consequences for businesses relying on these gateways. To secure your devices, immediately patch to the latest firmware version provided by Planet Technology. Review access controls and implement strict authentication measures to ensure only authorized personnel can interact with these gateways. You've got this! With these steps, you can lock down your gateways and keep your operations safe! 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.00831 · 57.1th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2025-09-17T06:48Z
EPSS history
Timeline
  • 17 SEP 06:48Z
    Planet Technology|Industrial Cellular Gateway - Missing Authentication
    cvelistv5