CVE-2025-46275: Planet Technology Network Products Missing Authentication for Critical Function

Published Apr 24, 2025

Updated

WGS-80HPT-V2 and WGS-4215-8T2S are missing authentication that could allow an attacker to create an administrator account without knowing any existing credentials.

Affected Software

5 affected components

Planet Technology UNI-NMS-Lite: Versions 1.0b211018 and prior

Planet Technology NMS-500: All Versions

Planet Technology NMS-1000V: All Versions

Planet Technology WGS-804HPT-V2: Versions 2.305b250121 and prior

Planet Technology WGS-4215-8T2S: Versions 1.305b241115 and prior

Remediation

Information

Planet Technology has released patches for the following devices: * WGS-804HPT (v2) https://www.planet.com.tw/en/product/wgs-804hpt-v2 * WGS-4215-8T2 https://www.planet.com.tw/en/product/wgs-4215-8t2s * S https://www.planet.com.tw/en/product/wgs-4215-8t2s UNI-NMS https://www.planet.com.tw/en/product/uni-nms * NMS-500 https://www.planet.com.tw/en/product/nms-500 * NMS-1000V https://www.planet.com.tw/en/product/nms-1000v

Event History

Apr 24, 2025

CVE Published

via MITRE·10:58 PM

Data Sourced

via MITRE·10:58 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·11:15 PM

DescriptionSeverityWeakness

Apr 14, 57299

Event

via FIRST·08:41 AM

Parent advisories

This vulnerability appears in the following advisories.

ICSA-25-114-06

Frequently Asked Questions

What is the severity of CVE-2025-46275?

CVE-2025-46275 is considered a critical vulnerability due to the lack of authentication that allows unauthorized account creation.

How do I fix CVE-2025-46275?

To fix CVE-2025-46275, update the affected devices to the latest firmware versions provided by Planet Technology.

What products are affected by CVE-2025-46275?

CVE-2025-46275 affects Planet Technology's UNI-NMS-Lite, NMS-500, NMS-1000V, WGS-804HPT-V2, and WGS-4215-8T2S.

What types of attacks can exploit CVE-2025-46275?

CVE-2025-46275 can be exploited by attackers to create unauthorized administrator accounts, leading to potential system compromise.

Is there a workaround for CVE-2025-46275?

Currently, the best approach to mitigate CVE-2025-46275 is to apply the latest firmware updates as no official workaround is provided.