CVE-2026-75125: PLANET GS-4210-16P2S Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post
PLANET GS-4210-16P2S firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted request omitting the rmtIP parameter to cause the CGI process to dereference a null pointer and crash, resulting in denial of service of the web management interface.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PLANET GS-4210-16P2Sto a version that resolves this vulnerability.Fixed in 3.441b260626 - Configuration
Modify the /cgi-bin/dispatcher.cgi web_poe_alive_rmtip_post handler to verify that the rmtIP parameter is present before dereferencing it, preventing null-pointer crashes (DoS of the web management interface).
/cgi-bin/dispatcher.cgi (web_poe_alive_rmtip_post handler) rmtIP parameter presence validation = Verify presence of rmtIP before dereference
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to reach the device's web management interface remotely and authenticate with high privileges. No user interaction is required.
What is the practical impact of a successful exploit?
A crafted request that omits the rmtIP parameter can crash the affected CGI process. This causes denial of service for the web management interface; the provided information does not indicate impact to confidentiality or integrity.
Which firmware versions are affected?
PLANET GS-4210-16P2S firmware versions before 3.441b260626 are affected.