CVE-2026-75124CWE-120

CVE-2026-75124

High · published August 29, 2026

CVSS v3.1
7.5
EPSS
1%
Percentile
52.9
In the wild
Unconfirmed
What it is

PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_query_string to process attacker-controlled data into a fixed-size stack buffer. An unauthenticated remote attacker can send an oversized GET request to dispatcher.cgi to cause denial of service of the web management interface and potentially trigger memory corruption.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
EPSS
0.00707 · 52.9th percentile
Weakness
CWE-120 · Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Published
2026-08-29T00:19Z
References (2)
https://www.planet.com.tw/en/support/security-advisory/10 · [email protected]https://www.vulncheck.com/advisories/planet-gs-4210-16p2s-memory-corruption-via-dispatcher-cgi-readhttpparam · [email protected]
EPSS history
Timeline
  • 30 AUG 16:19Z
    EPSS moved — → 0%
    epss
  • 28 AUG 15:32Z
    PLANET GS-4210-16P2S Memory Corruption via dispatcher.cgi _readHttpParam
    cvelistv5