CVE-2025-9972CWE-78

Planet Technology|Industrial Cellular Gateway - OS Command Injection

Critical · published September 17, 2025

CVSS v4.0
9.3
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

🚨 Unauthenticated remote attackers can easily execute arbitrary OS commands on certain models of Industrial Cellular Gateways from Planet Technology! 🔥 Think of this like a delivery truck that has a door that anyone can open without a key. An intruder could just hop in and start the engine, controlling everything inside without anyone noticing! This vulnerability is absolutely devastating! An attacker could gain full control over the device, allowing them to install malicious software, manipulate data, or even disrupt critical industrial operations. The potential for chaos is massive, and it's crucial to act before it becomes a reality.

Put simply

Think of this like a delivery truck that has a door that anyone can open without a key. An intruder could just hop in and start the engine, controlling everything inside without anyone noticing! This OS Command Injection vulnerability lets attackers send arbitrary commands to the operating system of the device, giving them unauthorized access and control without needing to authenticate first. It's a significant security flaw that compromises the device's integrity.

What to do

This vulnerability is absolutely devastating! An attacker could gain full control over the device, allowing them to install malicious software, manipulate data, or even disrupt critical industrial operations. The potential for chaos is massive, and it's crucial to act before it becomes a reality. Immediate action is required! Ensure that your devices are updated to the latest firmware version that addresses this vulnerability. Additionally, implement strict network controls to limit access to these devices while the patch is rolled out. You’ve got this! Following these steps will get you back on track and protect your network. 🛡️

The record
Technical detail
CVSS v4.0
9.3 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
EPSS
0.02187 · 82.3th percentile
Weakness
CWE-78 · Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Published
2025-09-17T07:01Z
EPSS history
Timeline
  • 17 SEP 07:01Z
    Planet Technology|Industrial Cellular Gateway - OS Command Injection
    cvelistv5