CVE-2026-75125: PLANET GS-4210-16P2S V3 Null Pointer Dereference DoS via dispatcher.cgi web_poe_alive_rmtip_post
PLANET GS-4210-16P2S V3 firmware before 3.441b260626 contains an authenticated null pointer dereference vulnerability in /cgi-bin/dispatcher.cgi. The webpoealivermtippost handler dereferences the rmtIP parameter without verifying its presence. A remote authenticated attacker can send a crafted request omitting the rmtIP parameter to cause the CGI process to dereference a null pointer and crash, resulting in denial of service of the web management interface.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
PLANET GS-4210-16P2S V3 firmwareto a version that resolves this vulnerability.Fixed in 3.441b260626 - Configuration
Update dispatcher.cgi so the web_poe_alive_rmtip_post handler verifies the rmtIP parameter is present and valid before dereferencing it (the vulnerability occurs when rmtIP is omitted).
dispatcher.cgi (web_poe_alive_rmtip_post handler) rmtIP parameter presence validation = Verify rmtIP is present before dereference - Compensating control
Restrict access to the web management interface to trusted clients only, to reduce the chance of remote authenticated requests triggering the DoS condition.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must be able to reach the device's web management interface remotely and authenticate with high privileges. No user interaction is required.
What is the practical impact of a successful exploit?
A crafted request that omits the rmtIP parameter can crash the affected CGI process. This causes denial of service for the web management interface; the provided information does not indicate impact to confidentiality or integrity.
Which firmware versions are affected?
PLANET GS-4210-16P2S firmware versions before 3.441b260626 are affected.