CVE-2025-9972: Planet Technology｜Industrial Cellular Gateway - OS Command Injection

Published Sep 17, 2025

Updated

Certain models of Industrial Cellular Gateway developed by Planet Technology have an OS Command Injection vulnerability, allowing unauthenticated remote attackers to inject arbitrary OS commands and execute them on the device.

Affected Software

1 affected component

Planet Technology Industrial Cellular Gateway

Remediation

Information

Update ICG-2510WG-LTE (EU/US) to version 1.0_20250811 or later Update ICG-2510W-LTE (EU/US) to version 1.0_20250811 or later

Event History

Sep 17, 2025

CVE Published

via MITRE·07:01 AM

Data Sourced

via MITRE·07:01 AM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·07:15 AM

DescriptionSeverityWeakness

Feb 28, 57989

Event

via FIRST·01:19 AM

Frequently Asked Questions

What is the severity of CVE-2025-9972?

CVE-2025-9972 is rated as a critical vulnerability due to its ability to allow authenticated remote attackers to execute arbitrary OS commands.

How do I fix CVE-2025-9972?

To fix CVE-2025-9972, apply the latest security patches provided by N-Partner for affected products such as N-Reporter, N-Cloud, and N-Probe.

What are the affected products by CVE-2025-9972?

The affected products include N-Partner N-Reporter, N-Cloud, N-Probe, and Planet Technology Industrial Cellular Gateway.

Who is the vendor of the software related to CVE-2025-9972?

The vendor for the software related to CVE-2025-9972 is N-Partner.

What type of vulnerability is CVE-2025-9972?

CVE-2025-9972 is an OS Command Injection vulnerability.