CVE-2026-109445: PLANET GS-5220-8P2T2S Stack Buffer Overflow via webstax_auth Cookie
PLANET GS-5220-8P2T2S (hardware version 3.0) firmware versions before 3.2412b261008 contains a stack-based buffer overflow vulnerability that allows unauthenticated attackers to corrupt stack memory by submitting an oversized webstaxauth HTTP Cookie value that is copied into a fixed-size stack buffer without length validation. Attackers can send a crafted unauthenticated HTTP request with an oversized cookie to overwrite the saved return address and corrupt stack memory, leading to memory corruption and potential denial of service on the device.
Affected Software
Event History
Frequently Asked Questions
Which devices and firmware versions are affected?
The issue affects PLANET GS-5220-8P2T2S switches with hardware version 3.0 running firmware earlier than 3.2412b261008.
Does exploitation require authentication or user interaction?
No. An attacker can send a crafted HTTP request containing an oversized webstax_auth cookie without authentication or user interaction.
What is the likely impact of a successful attack?
The oversized cookie can corrupt stack memory and overwrite a saved return address. This can cause a denial of service and may allow broader compromise of confidentiality, integrity, and availability.