CVE-2024-52320: Planet Technology Planet WGS-804HPT Command Injection
Published Dec 6, 2024
·Updated
The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.
Affected Software
1 affected component
Planet Technology WGS-804HPT
Remediation
Information
Planet Technology recommends users upgrade to version 1.305b241111 https://www.planet.com.tw/en/support/downloads or later.
Event History
Dec 6, 2024
CVE Published
via MITRE·05:21 PM
Data Sourced
via MITRE·05:21 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeakness
Jan 20, 2025
News Published
via The Register·05:27 AM
News Published
via The Register·05:30 AM
Jan 21, 2025
Known Exploited
02:38 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-52320?
CVE-2024-52320 is considered a high severity vulnerability due to the risk of remote code execution by an unauthenticated attacker.
2
How do I fix CVE-2024-52320?
To mitigate CVE-2024-52320, it is recommended to apply any available patches from Planet Technology for the WGS-804HPT model.
3
Who is affected by CVE-2024-52320?
CVE-2024-52320 affects users of the Planet Technology WGS-804HPT device.
4
What type of attack can exploit CVE-2024-52320?
CVE-2024-52320 can be exploited through a command injection attack via malicious HTTP requests.
5
Is authentication required to exploit CVE-2024-52320?
No, CVE-2024-52320 can be exploited by unauthenticated attackers.