CVE-2026-75125
PLANET GS-4210-16P2S Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post
CVSS Score
4.9
EPSS Score
0.0%
EPSS Percentile
0th
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The web_poe_alive_rmtip_post handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted request omitting the rmtIP parameter to cause the CGI process to dereference a null pointer and crash, resulting in denial of service of the web management interface.
| CWE | CWE-476 |
| Vendor | planet technology corp. |
| Product | planet gs-4210-16p2s |
| Published | Aug 28, 2026 |
| Last Updated | Aug 28, 2026 |
Stay Ahead of the Next One
Get instant alerts for planet technology corp. planet gs-4210-16p2s
Be the first to know when new medium vulnerabilities affecting planet technology corp. planet gs-4210-16p2s are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
High
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected Versions
PLANET Technology Corp. / PLANET GS-4210-16P2S
0 < 3.441b260626
References
Credits
Jincheng Wang (@winmt) Professor Le Yu of Nanjing University of Posts and Telecommunications Professor Xiapu Luo of The Hong Kong Polytechnic University