CVE-2026-75124

Received Received - Intake

Memory Corruption in PLANET GS-4210-16P2S Firmware

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: VulnCheck

Description

PLANET GS-4210-16P2S firmware before 3.441b260626 contains a pre-authentication memory corruption vulnerability in the web management interface where the _readHttpParam function copies an oversized HTTP query string without guaranteeing NUL termination, allowing parse_query_string to process attacker-controlled data into a fixed-size stack buffer. An unauthenticated remote attacker can send an oversized GET request to dispatcher.cgi to cause denial of service of the web management interface and potentially trigger memory corruption.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-28

Last Modified

2026-08-28

Generated

2026-08-29

AI Q&A

2026-08-29

EPSS Evaluated

N/A

NVD

CVE-2026-75124

EUVD

EUVD-2026-67784

Affected Vendors & Products

Vendor	Product	Version / Range
planet	gs-4210-16p2s	to 3.441b260626 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is a pre-authentication memory corruption flaw in the PLANET GS-4210-16P2S firmware before version 3.441b260626. The issue occurs in the web management interface where the _readHttpParam function copies an oversized HTTP query string into a fixed-size stack buffer without ensuring proper NUL termination. This allows attacker-controlled data to be processed by the parse_query_string function, potentially causing denial of service or memory corruption.

Detection Guidance

To detect this vulnerability, monitor network traffic for unusually large GET requests targeting dispatcher.cgi. Check web server logs for requests exceeding typical query string lengths. Use tools like tcpdump or Wireshark to capture and analyze HTTP requests to the affected device.

Impact Analysis

An unauthenticated remote attacker can exploit this by sending a specially crafted GET request to dispatcher.cgi, causing the web management interface to crash or become unavailable. This could disrupt device management and potentially lead to further memory corruption issues.

Mitigation Strategies

Immediately update the GS-4210-16P2S firmware to version 3.441b260626 or later. If an update is not immediately available, restrict network access to the device's web management interface by blocking external connections to port 80/443. Consider disabling the web interface if not required.

Hi! I’m here to help you understand CVE-2026-75124. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70