CVE-2025-9971: Planet Technology｜Industrial Cellular Gateway - Missing Authentication

Published Sep 17, 2025

Updated

Certain models of Industrial Cellular Gateway developed by Planet Technology have a Missing Authentication vulnerability, allowing unauthenticated remote attackers to manipulate the device via a specific functionality.

Affected Software

1 affected component

Planet Technology Industrial Cellular Gateway

Remediation

Information

Update ICG-2510WG-LTE (EU/US) to version V1.0_20250811 or later Update ICG-2510W-LTE (EU/US) to version V1.0_20250811 or later

Event History

Sep 17, 2025

CVE Published

via MITRE·06:48 AM

Data Sourced

via MITRE·06:48 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Jul 15, 58016

Event

via FIRST·06:06 PM

Frequently Asked Questions

What is the severity of CVE-2025-9971?

CVE-2025-9971 is considered to be of high severity due to the risk of unauthenticated remote attacks on the device.

How do I fix CVE-2025-9971?

To fix CVE-2025-9971, ensure that the device firmware is updated to the latest version provided by Planet Technology.

What devices are affected by CVE-2025-9971?

CVE-2025-9971 affects certain models of the Industrial Cellular Gateway developed by Planet Technology.

What kind of attacks are possible due to CVE-2025-9971?

CVE-2025-9971 allows unauthenticated remote attackers to manipulate the device's functionality.

Is CVE-2025-9971 being actively exploited?

While specific exploitation details are not provided, the nature of the vulnerability indicates potential for active exploitation.