Exploited
CWE
78 77
Advisory Published
Updated

CVE-2024-52320: Planet Technology Planet WGS-804HPT Command Injection

First published: Fri Dec 06 2024(Updated: )

The affected product is vulnerable to a command injection. An unauthenticated attacker could send commands through a malicious HTTP request which could result in remote code execution.

Credit: ics-cert@hq.dhs.gov

Affected SoftwareAffected VersionHow to fix
Planet Technology WGS-804HPT industrial ethernet switches

Remedy

Planet Technology recommends users upgrade to version 1.305b241111 https://www.planet.com.tw/en/support/downloads  or later.

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Peer vulnerabilities

(Found alongside the following vulnerabilities)

Frequently Asked Questions

  • What is the severity of CVE-2024-52320?

    CVE-2024-52320 is considered a high severity vulnerability due to the risk of remote code execution by an unauthenticated attacker.

  • How do I fix CVE-2024-52320?

    To mitigate CVE-2024-52320, it is recommended to apply any available patches from Planet Technology for the WGS-804HPT model.

  • Who is affected by CVE-2024-52320?

    CVE-2024-52320 affects users of the Planet Technology WGS-804HPT device.

  • What type of attack can exploit CVE-2024-52320?

    CVE-2024-52320 can be exploited through a command injection attack via malicious HTTP requests.

  • Is authentication required to exploit CVE-2024-52320?

    No, CVE-2024-52320 can be exploited by unauthenticated attackers.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203