CVE-2024-48871: Planet Technology Planet WGS-804HPT Stack-based Buffer Overflow

Published Dec 6, 2024

Updated

The affected product is vulnerable to a stack-based buffer overflow. An unauthenticated attacker could send a malicious HTTP request that the webserver fails to properly check input size before copying data to the stack, potentially allowing remote code execution.

Affected Software

1 affected component

Planet Technology WGS-804HPT

Remediation

Information

Planet Technology recommends users upgrade to version 1.305b241111 https://www.planet.com.tw/en/support/downloads or later.

Event History

Dec 6, 2024

CVE Published

via MITRE·05:20 PM

Data Sourced

via MITRE·05:20 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeakness

Jan 20, 2025

News Published

via The Register·05:27 AM

News Published

via The Register·05:30 AM

Jan 21, 2025

Known Exploited

02:38 AM

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2024-48871?

CVE-2024-48871 is classified as a critical vulnerability due to its potential for remote code execution.

How do I fix CVE-2024-48871?

To fix CVE-2024-48871, update the firmware of the Planet Technology WGS-804HPT to the latest version that addresses this vulnerability.

Who is affected by CVE-2024-48871?

CVE-2024-48871 affects devices running the Planet Technology WGS-804HPT product.

What type of vulnerability is CVE-2024-48871?

CVE-2024-48871 is a stack-based buffer overflow vulnerability that allows for potential remote code execution.

Can CVE-2024-48871 be exploited remotely?

Yes, an unauthenticated attacker can exploit CVE-2024-48871 by sending a malicious HTTP request.